Close Open Privacy Scan

link https://github.com/langfuse/langfuse
bolt Snapshot: commit 1cb1bbc
science engine v1.21
schedule 2026-07-20T04:01:28.194751+00:00
update Scan engine updated since this result

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

smart_toy MCP server detected: @ai-sdk/anthropic, @ai-sdk/openai, @modelcontextprotocol/sdk, ai — detected in dependencies, not a safety judgment.
Incomplete scan — only 84/191 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

0 /100
High privacy risk — application leak confirmed

High risk · 957 finding(s)

Dependency score: 27 (High risk)

bar_chart Score Breakdown

pii_flow −60
telemetry −25
egress −15
env_fs −3

list Scan Summary

12 high 86 medium 859 low
First-party packages: 5
Dependency packages: 21
Ecosystem: npm

swap_horiz Confirmed data exfiltration in application code

External domains: accountname.blob.core.windows.netaccounts.google.comall-http-intake.logs.datad0g.comapi.anthropic.comapi.github.comapi.openai.comapi.usepylon.comapp.circleci.comapp.examplebedrock-agent-runtime.us-west-2.amazonaws.combedrock-runtime.us-east-1.amazonaws.combitbucket.orgboosty.tobrowser-intake-ap1-datadoghq.combrowser-intake-ap2-datadoghq.combrowser-intake-uk1-datadoghq.comcal.comci.appveyor.comclickhouse.comcloud.google.comcloud.langfuse.comcommons.wikimedia.orgdate-fns.orgdocs.aws.amazon.comdocs.github.comdocs.langfuse.comdtdg.coen.wikipedia.orgeu.posthog.comexample.okta.comgithub.acme.comgithub.comgitlab.comhipaa.cloud.langfuse.comhttp-intake.logsimg.shields.iojp.cloud.langfuse.comjson-schema.orglangfuse.comlangfuse.locallogin.microsoftonline.comlu.mamixpanel.comnpms.ioopencollective.compatreon.complatform.openai.complay.min.ioposthog.compublic-trace-http-intake.logs.datad0g.compublic-trace-http-intake.logs.datadoghq.compublic-trace-http-intake.logs.datadoghq.euraw.githubusercontent.comstaging.langfuse.comstatic.langfuse.comstatic.modelcontextprotocol.iostatus.langfuse.comtanstack.comtools.ietf.orgtrace.browser-intake-us3-datadoghq.comtrace.browser-intake-us5-datadoghq.comtrpc.ious.cloud.langfuse.comwww.datadoghq.comwww.eclipse.orgwww.googleapis.comwww.w3.orgx.comx.localyour-instance.openai.azure.comyour-service.com

high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:104 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:134 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:141 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/features/auth-credentials/server/signupApiHandler.ts:95 → repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/api/auth/signup-verify.ts:12 → repo/web/src/pages/api/auth/signup-verify.ts:96
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/enterprise-sso-required.tsx:84 → repo/web/src/pages/auth/enterprise-sso-required.tsx:92
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-in.tsx:663 → repo/web/src/pages/auth/sign-in.tsx:677
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-up.tsx:134 → repo/web/src/pages/auth/sign-up.tsx:149
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-up.tsx:355 → repo/web/src/pages/auth/sign-up.tsx:350
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/server/adminAccessWebhook.ts:47 → repo/web/src/server/adminAccessWebhook.ts:57
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/server/auth.ts:1123 → repo/web/src/server/auth.ts:1119
medium first-party (npm): web Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:247 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244
medium first-party (npm): web Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:342 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332
medium first-party (npm): web Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:382 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372
medium first-party (npm): web A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/web/src/features/auth-credentials/server/signupApiHandler.ts:96 → repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116
hub Dependency data flows (1)
high @ai-sdk/amazon-bedrock dependency A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:76 → pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:87

</> First-Party Code

first-party (npm): web

npm first-party
high pii_flow production #2aca66bfe49c0819 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244 · flow /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:104 → /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244 
      await this.post({
        url: this.config.userUrl,
        payload: { isLangfuse: true, ...parsed.data },
        context: { event: "upsertUser", userId: parsed.data.userId },
        expectJsonResponse: false,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ff5c3d1374a9e658 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332 · flow /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:134 → /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332 
        await this.post({
          url: this.config.orgUrl,
          payload: {
            isLangfuse: true,
            type: "setUserRole" as const,
            ...parsed.data,
          },
          context: {
            event: "setUserRole",
            orgId: parsed.data.orgId,
            userId: parsed.data.userId,
          },
          expectJsonResponse: false,
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #07a0eaa89659a306 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372 · flow /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:141 → /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372 
        await this.post({
          url: this.config.orgUrl,
          payload: {
            isLangfuse: true,
            type: "removeUser" as const,
            ...parsed.data,
          },
          context: {
            event: "removeUser",
            orgId: parsed.data.orgId,
            userId: parsed.data.userId,
          },
          expectJsonResponse: false,
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #75525e777c89d012 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116 · flow /tmp/closeopen-_489jj4o/repo/web/src/features/auth-credentials/server/signupApiHandler.ts:95 → /tmp/closeopen-_489jj4o/repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116 
    await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
      method: "POST",
      body: JSON.stringify({
        name: body.name,
        email: body.email,
        referralSource: body.referralSource,
        cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
        userId: userId,
      }),
      headers: {
        "Content-Type": "application/json",
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e3a12b745c7bc1d4 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/api/auth/signup-verify.ts:96 · flow /tmp/closeopen-_489jj4o/repo/web/src/pages/api/auth/signup-verify.ts:12 → /tmp/closeopen-_489jj4o/repo/web/src/pages/api/auth/signup-verify.ts:96 
      await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
        method: "POST",
        body: JSON.stringify({
          name,
          email: normalizedEmail,
          cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
          userId: newUser.id,
        }),
        headers: {
          "Content-Type": "application/json",
        },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0d85f0e06207f4c9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/enterprise-sso-required.tsx:92 · flow /tmp/closeopen-_489jj4o/repo/web/src/pages/auth/enterprise-sso-required.tsx:84 → /tmp/closeopen-_489jj4o/repo/web/src/pages/auth/enterprise-sso-required.tsx:92 
      const response = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3512f60d430248ae — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-in.tsx:677 · flow /tmp/closeopen-_489jj4o/repo/web/src/pages/auth/sign-in.tsx:663 → /tmp/closeopen-_489jj4o/repo/web/src/pages/auth/sign-in.tsx:677 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d884f96b3439e933 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-up.tsx:149 · flow /tmp/closeopen-_489jj4o/repo/web/src/pages/auth/sign-up.tsx:134 → /tmp/closeopen-_489jj4o/repo/web/src/pages/auth/sign-up.tsx:149 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d1da6128b28c5814 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-up.tsx:350 · flow /tmp/closeopen-_489jj4o/repo/web/src/pages/auth/sign-up.tsx:355 → /tmp/closeopen-_489jj4o/repo/web/src/pages/auth/sign-up.tsx:350 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/signup-verify`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ email: values.email, name: values.name }),
        },
      );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a291312efc1b10be — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/server/adminAccessWebhook.ts:57 · flow /tmp/closeopen-_489jj4o/repo/web/src/server/adminAccessWebhook.ts:47 → /tmp/closeopen-_489jj4o/repo/web/src/server/adminAccessWebhook.ts:57 
    const response = await fetch(env.LANGFUSE_ADMIN_ACCESS_WEBHOOK, {
      method: "POST",
      body: JSON.stringify(payload),
      headers: {
        "Content-Type": "application/json",
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #891f9ecb09f43b1a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/server/auth.ts:1119 · flow /tmp/closeopen-_489jj4o/repo/web/src/server/auth.ts:1123 → /tmp/closeopen-_489jj4o/repo/web/src/server/auth.ts:1119 
          await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
            method: "POST",
            body: JSON.stringify({
              name: user.name,
              email: user.email,
              cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
              userId: user.id,
              // referralSource: ...
            }),
            headers: {
              "Content-Type": "application/json",
            },
          });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #fff83378f4472943 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/instrumentation-client.ts:1 
import * as Sentry from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry test-only Excluded from app score #a945bb5c121d224e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/next.config.mjs:6 
import { withSentryConfig } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e14d3e9ca2eb9ed8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/components/error-page.tsx:7 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2dc54c5739418139 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/components/layouts/app-layout/index.tsx:15 
import posthog from "posthog-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #f98a796a25fb28f6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/components/layouts/app-layout/index.tsx:133 
      posthog.reset();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium pii_flow production #f5523213d00d302d — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244 · flow /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:247 → /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244 
      await this.post({
        url: this.config.userUrl,
        payload: { isLangfuse: true, ...parsed.data },
        context: { event: "upsertUser", userId: parsed.data.userId },
        expectJsonResponse: false,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium pii_flow production #f6e69d8ec8acfc03 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332 · flow /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:342 → /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332 
        await this.post({
          url: this.config.orgUrl,
          payload: {
            isLangfuse: true,
            type: "setUserRole" as const,
            ...parsed.data,
          },
          context: {
            event: "setUserRole",
            orgId: parsed.data.orgId,
            userId: parsed.data.userId,
          },
          expectJsonResponse: false,
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium pii_flow production #6a8860ac815f7958 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372 · flow /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:382 → /tmp/closeopen-_489jj4o/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372 
        await this.post({
          url: this.config.orgUrl,
          payload: {
            isLangfuse: true,
            type: "removeUser" as const,
            ...parsed.data,
          },
          context: {
            event: "removeUser",
            orgId: parsed.data.orgId,
            userId: parsed.data.userId,
          },
          expectJsonResponse: false,
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium pii_flow production #2fbd0386c835e6a6 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116 · flow /tmp/closeopen-_489jj4o/repo/web/src/features/auth-credentials/server/signupApiHandler.ts:96 → /tmp/closeopen-_489jj4o/repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116 
    await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
      method: "POST",
      body: JSON.stringify({
        name: body.name,
        email: body.email,
        referralSource: body.referralSource,
        cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
        userId: userId,
      }),
      headers: {
        "Content-Type": "application/json",
      },
    });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium telemetry production #b0227606fe3f73b0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/auth/lib/createProjectMembershipsOnSignup.ts:287 
        posthog.capture({
          distinctId: user.id,
          event: "cloud_signup_complete",
          properties: {
            cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
            hasDemoAccess: demoProject !== undefined,
            hasDefaultOrg: defaultOrgs.length > 0,
            hasDefaultProject: defaultProjects.length > 0,
          },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #3d6d7edd116e0b5f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/auth/lib/createProjectMembershipsOnSignup.ts:297 
        await posthog.shutdown();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #baf39884342ef9fe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/events/hooks/useV4Beta.ts:4 
import posthog from "posthog-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2a44dd9be470a9e5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/events/hooks/useV4Beta.ts:35 
            posthog.setPersonProperties({
              [V4_BETA_ENABLED_POSTHOG_PROPERTY]: v4BetaEnabled,
            });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #0e5352d3551a05ad — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/events/hooks/useV4Beta.ts:38 
            posthog.register({
              [V4_BETA_ENABLED_POSTHOG_PROPERTY]: v4BetaEnabled,
            });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #ee57bf86edfa3db9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/posthog-analytics/ServerPosthog.ts:2 
import { PostHog } from "posthog-node";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #99e0838992404cb9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/posthog-analytics/usePostHogClientCapture.ts:1 
import { type CaptureResult, type CaptureOptions } from "posthog-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e845e64074fa19e1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/posthog-analytics/usePostHogClientCapture.ts:328 
      return posthog.capture(eventName, properties, options);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #b04169203ee80a4e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/telemetry/index.ts:252 
    posthog.capture({
      distinctId: "docker:" + clientId,
      event: "telemetry",
      properties: {
        langfuseVersion: VERSION,
        userDomains: domains,
        totalProjects: totalProjects,
        traces: countTraces,
        scores: countScores,
        observations: countObservations,
        datasets: countDatasets,
        datasetItems: countDatasetItems,
        datasetRuns: countDatasetRuns,
        datasetRunItems: countDatasetRunItems,
        startTimeframe: startTimeframe?.toISOString(),
        endTimeframe: endTimeframe.toISOString(),
        eeLicenseKey: env.LANGFUSE_EE_LICENSE_KEY,
        langfuseCloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
        $set: {
          environment: process.env.NODE_ENV,
          userDomains: domains,
          docker: true,
          langfuseVersion: VERSION,
        },
      },
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #61e63d623e918182 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/telemetry/index.ts:279 
    await posthog.shutdown();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d1e095a24d997bd2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/hooks/parserWorkerError.clienttest.ts:2 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #610a6262cada79b8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/hooks/parserWorkerError.ts:1 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e78c845388736f77 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:9 
import { setUser } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #c5770161c4c4dda9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:24 
import posthog from "posthog-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #04b52271fc05943b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:95 
  posthog.init(process.env.NEXT_PUBLIC_POSTHOG_KEY, {
    api_host: process.env.NEXT_PUBLIC_POSTHOG_HOST || "https://eu.posthog.com",
    ui_host: "https://eu.posthog.com",
    // Enable debug mode in development
    loaded: (posthog) => {
      if (process.env.NODE_ENV === "development") posthog.debug();
    },
    session_recording: {
      maskCapturedNetworkRequestFn(request) {
        request.requestBody = request.requestBody ? "REDACTED" : undefined;
        request.responseBody = request.responseBody ? "REDACTED" : undefined;
        return request;
      },
    },
    autocapture: false,
    enable_heatmaps: false,
    persistence: "cookie",
  });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #55d7d5399e527247 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:100 
      if (process.env.NODE_ENV === "development") posthog.debug();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #cc7c804fe9aac004 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:127 
        posthog.capture("$pageview");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #c5446edb4bf67d6a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:208 
        posthog.identify(sessionUser.id ?? undefined, {
          environment: process.env.NODE_ENV,
          email: sessionUser.email ?? undefined,
          name: sessionUser.name ?? undefined,
          featureFlags: sessionUser.featureFlags ?? undefined,
          projects:
            sessionUser.organizations.flatMap((org) =>
              org.projects.map((project) => ({
                ...project,
                organization: org,
              })),
            ) ?? undefined,
          LANGFUSE_CLOUD_REGION: region,
          [V4_BETA_ENABLED_POSTHOG_PROPERTY]:
            sessionUser.v4BetaEnabled ?? false,
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #0abac369316ad55d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:224 
        posthog.register({
          [V4_BETA_ENABLED_POSTHOG_PROPERTY]:
            sessionUser.v4BetaEnabled ?? false,
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #1c4d129bd109f6ec — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:237 
      posthog.unregister(V4_BETA_ENABLED_POSTHOG_PROPERTY);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #70be2e93ef786b1e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_error.tsx:1 
import {
  captureUnderscoreErrorException,
  isEnabled as isSentryEnabled,
} from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #48c782dafcc37ce1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/auth/sign-in.tsx:41 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #5f9526389cd5022f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/utils/api.ts:8 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #4f99fc720fe10392 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/utils/captureUnknownError.ts:1 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #6fb7ebc1f908417b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/utils/sentryFilters.clienttest.ts:1 
import { type ErrorEvent } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d7ca0c07350c1a47 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/utils/sentryFilters.ts:1 
import { type ErrorEvent } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 424 low-confidence finding(s)
low env_fs production #7f2369d27e3a53d8 — Environment-variable access.
repo/web/instrumentation-client.ts:5 
  process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION !== undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54aa5718293d139b — Environment-variable access.
repo/web/instrumentation-client.ts:6 
    ? ["EU", "US"].includes(process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79c998ddd5699381 — Environment-variable access.
repo/web/instrumentation-client.ts:10 
  dsn: process.env.NEXT_PUBLIC_SENTRY_DSN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #456bbe6676fc5c9e — Environment-variable access.
repo/web/instrumentation-client.ts:11 
  environment: process.env.NEXT_PUBLIC_SENTRY_ENVIRONMENT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b7ed56d0b9f6b55 — Environment-variable access.
repo/web/instrumentation-client.ts:12 
  release: process.env.NEXT_PUBLIC_BUILD_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #585c0ed841f15c5a — Environment-variable access.
repo/web/instrumentation-client.ts:65 
  tracesSampleRate: process.env.NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bfc253bf122815e — Environment-variable access.
repo/web/instrumentation-client.ts:66 
    ? Number(process.env.NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0fad4a53207e8f6 — Environment-variable access.
repo/web/instrumentation-client.ts:71 
  replaysSessionSampleRate: process.env.NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7734d13468c4fee5 — Environment-variable access.
repo/web/instrumentation-client.ts:72 
    ? Number(process.env.NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #00b91e5713c1cc2a — Environment-variable access.
repo/web/next.config.mjs:66 
  distDir: process.env.NEXT_DIST_DIR || ".next",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c792d7bbaf6e288f — Environment-variable access.
repo/web/next.config.mjs:71 
    ignoreBuildErrors: process.env.NEXT_IGNORE_BUILD_ERRORS === "true",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1e27aeededcfdab2 — Environment-variable access.
repo/web/next.config.mjs:261 
  org: process.env.SENTRY_ORG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b173db586bd4f2e0 — Environment-variable access.
repo/web/next.config.mjs:262 
  project: process.env.SENTRY_PROJECT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9f040a90caa86953 — Environment-variable access.
repo/web/next.config.mjs:267 
  silent: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e7d1e60a0daf6453 — Environment-variable access.
repo/web/playwright.config.ts:16 
    command: process.env.CI ? "npm run start" : "npm run dev",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c42bceca07bde76b — Environment-variable access.
repo/web/playwright.config.ts:18 
    reuseExistingServer: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #3b3332e63609155c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__e2e__/api.servertest.ts:104 
        const traceResponse = await fetch(traceUrl, {
          headers: {
            Authorization: userApiKeyAuth,
          },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #55fdcd19aa4bf9a2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__e2e__/api.servertest.ts:294 
    const fetchedPrompt = await fetch(
      `http://localhost:3000/api/public/v2/prompts/${encodeURIComponent(promptName)}`,
      {
        headers: {
          "Content-Type": "application/json",
          Authorization: userApiKeyAuth,
        },
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #b99ccb9d195275be — Environment-variable access.
repo/web/src/__tests__/after-teardown.ts:9 
  if (process.env.VITEST_SHARED_CONTEXT === "1") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #208b8bc152c10d56 — Environment-variable access.
repo/web/src/__tests__/server/code-eval-test-run-trpc.servertest.ts:6 
  process.env.LANGFUSE_CODE_EVAL_DISPATCHER = "insecure-local";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e9b2cf445ce8d551 — Environment-variable access.
repo/web/src/__tests__/server/dataset-item-media-references.servertest.ts:242 
    process.env.LANGFUSE_USE_AZURE_BLOB === "true" ? it : it.skip;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #acd11d676a350c82 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/server/dataset-item-media-references.servertest.ts:354 
      const uploadResponse = await fetch(result.uploadUrl!, {
        method: "PUT",
        body: fileBytes as BodyInit,
        headers: {
          "Content-Type": MediaContentType.PNG,
          ...result.uploadHeaders,
        } as HeadersInit,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #30d20a529d971f6b — Environment-variable access.
repo/web/src/__tests__/server/dataset-service.servertest.ts:34 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9e33d4aeaf148ace — Environment-variable access.
repo/web/src/__tests__/server/dataset-service.servertest.ts:36 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c78304f0bfed3797 — Environment-variable access.
repo/web/src/__tests__/server/datasets-api.servertest.ts:2 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8363a8b3eac57baf — Environment-variable access.
repo/web/src/__tests__/server/datasets-api.servertest.ts:4 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #63d9ef416b2845e4 — Environment-variable access.
repo/web/src/__tests__/server/datasets-schema-validation.servertest.ts:20 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #aee104b00e15f976 — Environment-variable access.
repo/web/src/__tests__/server/datasets-schema-validation.servertest.ts:22 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #688c4cc7d9622d8a — Environment-variable access.
repo/web/src/__tests__/server/datasets-ui-table.servertest.ts:12 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #88f6bf80fbbe6e34 — Environment-variable access.
repo/web/src/__tests__/server/datasets-ui-table.servertest.ts:14 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2206b94c2f55596e — Environment-variable access.
repo/web/src/__tests__/server/evals-trpc.servertest.ts:5 
  process.env.LANGFUSE_CODE_EVAL_DISPATCHER = "insecure-local";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #185dc11bfa6da847 — Environment-variable access.
repo/web/src/__tests__/server/evals-trpc.servertest.ts:6 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b130c81058a4d876 — Environment-variable access.
repo/web/src/__tests__/server/experiments-versioning.servertest.ts:2 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f69a831776abc243 — Environment-variable access.
repo/web/src/__tests__/server/experiments-versioning.servertest.ts:4 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d00e0fe804202da7 — Environment-variable access.
repo/web/src/__tests__/server/mcp-public-api-tools.servertest.ts:2 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "dual";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #424ad12384a52e42 — Environment-variable access.
repo/web/src/__tests__/server/mcp-public-api-tools.servertest.ts:5 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8bc0c6fcec592d14 — Environment-variable access.
repo/web/src/__tests__/server/mcp-public-api-tools.servertest.ts:7 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #01c19e592802fcdd — Environment-variable access.
repo/web/src/__tests__/server/mcp-tools-read.servertest.ts:2 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "dual";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #47dd50dfe9f2f108 — Filesystem access.
repo/web/src/__tests__/server/media.servertest.ts:2 
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cd046e282c7481fa — Environment-variable access.
repo/web/src/__tests__/server/media.servertest.ts:29 
    process.env.LANGFUSE_USE_AZURE_BLOB === "true" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d8c2b17dbb827230 — Filesystem access.
repo/web/src/__tests__/server/media.servertest.ts:82 
  const fileBytesPNG = fs.readFileSync(imagePathPNG);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2486b8bb779ab656 — Filesystem access.
repo/web/src/__tests__/server/media.servertest.ts:99 
  const fileBytesPDF = fs.readFileSync(imagePathPDF);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #f297867eafc616a4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/server/media.servertest.ts:184 
      const uploadFileResponse = await fetch(
        getUploadUrlResponse.body.uploadUrl,
        {
          method: "PUT",
          body: fileBytes as BodyInit,
          headers: {
            "Content-Type": contentType,
            "X-Amz-Checksum-Sha256": sha256Hash,
          },
        },
      ).catch((err) => console.error(err));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #12fe5a47e07bd433 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/server/media.servertest.ts:234 
      const fetchMediaAssetResponse = await fetch(
        getDownloadUrlResponse.body.url,
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #d642655f5d0903dc — Environment-variable access.
repo/web/src/__tests__/server/mixpanel-integration.servertest.ts:57 
  const originalEncryptionKey = process.env.ENCRYPTION_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b4706959af61cddd — Environment-variable access.
repo/web/src/__tests__/server/mixpanel-integration.servertest.ts:60 
    process.env.ENCRYPTION_KEY =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #52a0142166c5beac — Environment-variable access.
repo/web/src/__tests__/server/mixpanel-integration.servertest.ts:65 
    process.env.ENCRYPTION_KEY = originalEncryptionKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4cc81e5ecb893e3b — Environment-variable access.
repo/web/src/__tests__/server/monitors.servertest.ts:6 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "dual";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ba4a734d503a3a0d — Environment-variable access.
repo/web/src/__tests__/server/organizations-api.servertest.ts:67 
  const ADMIN_API_KEY = process.env.ADMIN_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #dbbb2b5a0413d835 — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:57 
  const originalEncryptionKey = process.env.ENCRYPTION_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d9ef576287e7d35f — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:64 
    process.env.ENCRYPTION_KEY =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #979546ba8065b9b0 — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:70 
    process.env.ENCRYPTION_KEY = originalEncryptionKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #89ff409f3aaa2a75 — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:98 
  const originalEncryptionKey = process.env.ENCRYPTION_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #801e6f4b82e0bee2 — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:101 
    process.env.ENCRYPTION_KEY =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #99f9f6dc6254e7ca — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:106 
    process.env.ENCRYPTION_KEY = originalEncryptionKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #52d6f8bd48876ed0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/server/redis-test-utils.ts:95 
  return await redisClient.get(key);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #54bf88cc43446ded — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-item-media-stateful-delete.servertest.ts:2 
  process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e98879c1b82c1171 — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-item-media-stateful-delete.servertest.ts:4 
  process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #482f5fa94d3e2e1c — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-items-repository.servertest.ts:2 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #167f1f6e38e8c435 — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-items-repository.servertest.ts:4 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #423ae2b23d75fe6a — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-items-stateful-upsert.servertest.ts:2 
  process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #25e4ee8b8eae8109 — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-items-stateful-upsert.servertest.ts:4 
  process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c543f96baec8d5fa — Environment-variable access.
repo/web/src/__tests__/server/repositories/environment-repository-events-only.servertest.ts:24 
    process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5a3552441e8c21ff — Environment-variable access.
repo/web/src/__tests__/server/repositories/environment-repository-events-only.servertest.ts:25 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "events_only";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #65ffbd5c59a4e530 — Environment-variable access.
repo/web/src/__tests__/server/repositories/environment-repository-events-only.servertest.ts:28 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #91d9fbbc79f0cd41 — Environment-variable access.
repo/web/src/__tests__/server/repositories/environment-repository.servertest.ts:12 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "legacy";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #96d4d4809fe9661b — Environment-variable access.
repo/web/src/__tests__/server/scores-trpc-events-only.servertest.ts:26 
    process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6ce212b682b49248 — Environment-variable access.
repo/web/src/__tests__/server/scores-trpc-events-only.servertest.ts:27 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "events_only";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6218718a42965c58 — Environment-variable access.
repo/web/src/__tests__/server/scores-trpc-events-only.servertest.ts:30 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3d4a3049d438f962 — Environment-variable access.
repo/web/src/__tests__/server/sessions-observations-io-cap.servertest.ts:29 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2c415706e6166404 — Environment-variable access.
repo/web/src/__tests__/server/sessions-trpc-events-only.servertest.ts:24 
    process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #40746282fd7cb6cf — Environment-variable access.
repo/web/src/__tests__/server/sessions-trpc-events-only.servertest.ts:25 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "events_only";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7481d70a7d5266ca — Environment-variable access.
repo/web/src/__tests__/server/sessions-trpc-events-only.servertest.ts:28 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #6c2c66b768705d9a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/server/slack-integration.servertest.ts:510 
      const response = await fetch(
        `http://localhost:3000/api/public/slack/install?projectId=${project.id}`,
        {
          method: "GET",
          headers: {
            Accept: "application/json",
          },
          // No cookies/session - simulating unauthenticated request
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #fdd8abac7f979d7d — Environment-variable access.
repo/web/src/__tests__/server/traces-trpc-events-only.servertest.ts:25 
    process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f05fc4ad37a7a2a1 — Environment-variable access.
repo/web/src/__tests__/server/traces-trpc-events-only.servertest.ts:26 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "events_only";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b5548d4ac96e2942 — Environment-variable access.
repo/web/src/__tests__/server/traces-trpc-events-only.servertest.ts:29 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1411d4f538e397b4 — Environment-variable access.
repo/web/src/__tests__/server/unit/blobStorageKey.servertest.ts:170 
  const envPrefix = process.env.LANGFUSE_S3_EVENT_UPLOAD_PREFIX ?? "";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #59f1db30e55619b0 — Environment-variable access.
repo/web/src/__tests__/server/unit/blobStorageKey.servertest.ts:252 
  const envPrefix = process.env.LANGFUSE_S3_EVENT_UPLOAD_PREFIX ?? "";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2d9a31022fc21405 — Environment-variable access.
repo/web/src/__tests__/server/unit/code-eval-capabilities.servertest.ts:11 
  delete process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e5b15966040ddc4d — Environment-variable access.
repo/web/src/__tests__/server/unit/code-eval-capabilities.servertest.ts:12 
  delete process.env.LANGFUSE_CODE_EVAL_DISPATCHER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6c306254e834370b — Environment-variable access.
repo/web/src/__tests__/server/unit/code-eval-capabilities.servertest.ts:16 
      delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #33e81ffe20db9e9c — Environment-variable access.
repo/web/src/__tests__/server/unit/code-eval-capabilities.servertest.ts:18 
      process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3f3400bfebc24ac5 — Filesystem access.
repo/web/src/__tests__/server/unit/code-eval-python-runner-contract.servertest.ts:1 
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #837ceb6c2b2c374a — Filesystem access.
repo/web/src/__tests__/server/unit/code-eval-python-runner-contract.servertest.ts:14 
    const runnerSource = readFileSync(
      path.join(
        __dirname,
        "../../../../..",
        "scripts/code-eval-runners/python/code_based_eval_handler.py",
      ),
      "utf8",
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d9a3e0f424bc6e49 — Environment-variable access.
repo/web/src/__tests__/server/unit/evaluator-preflight.servertest.ts:44 
    process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #904da34806bd1036 — Environment-variable access.
repo/web/src/__tests__/server/unit/evaluator-preflight.servertest.ts:48 
    delete process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f1c7d88504c6477a — Environment-variable access.
repo/web/src/__tests__/server/unit/evaluator-preflight.servertest.ts:68 
      delete process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #83a5b31f204ed359 — Environment-variable access.
repo/web/src/__tests__/server/unit/evaluator-preflight.servertest.ts:72 
    process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3123849fdedc4de1 — Environment-variable access.
repo/web/src/__tests__/server/unit/evaluator-preflight.servertest.ts:96 
    process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5e12ded9a1b60f63 — Environment-variable access.
repo/web/src/__tests__/server/unit/sfdc-sync.servertest.ts:529 
  const originalRegion = process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8420b54939f4049b — Environment-variable access.
repo/web/src/__tests__/server/unit/sfdc-sync.servertest.ts:531 
    process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION = "STAGING";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8d7b64b2926f1404 — Environment-variable access.
repo/web/src/__tests__/server/unit/sfdc-sync.servertest.ts:535 
      delete process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #34baff45ffa9a351 — Environment-variable access.
repo/web/src/__tests__/server/unit/sfdc-sync.servertest.ts:537 
      process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION = originalRegion;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #35fdb881c172201a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/test-utils.ts:152 
  const response = await fetch(finalUrl, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #bae8c791f67e339d — Environment-variable access.
repo/web/src/__tests__/vitest-test-db-setup.ts:26 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d73c9ba3dfc9a844 — Environment-variable access.
repo/web/src/__tests__/vitest-test-db-setup.ts:30 
    process.env.NODE_ENV !== "test"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #d6ae0b68d2b472d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/components/layouts/app-layout/variants/AuthenticatedLayout.tsx:218 
    fetch(`/api/project/${encodeURIComponent(projectId)}/visit`, {
      method: "POST",
    }).catch(() => {});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #bfa3d3dbbc691e92 — Environment-variable access.
repo/web/src/components/table/peek/hooks/usePeekNavigation.ts:214 
        const pathnameWithBasePath = `${process.env.NEXT_PUBLIC_BASE_PATH ?? ""}${pathnameWithQuery}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #820f4c0d841a9f73 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/components/trace/lib/download-trace.ts:51 
  const response = await fetch(buildTraceDownloadUrl({ traceId, projectId }), {
    method: "GET",
    credentials: "same-origin",
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #944c43c2070e2829 — Environment-variable access.
repo/web/src/components/ui/AdvancedJsonViewer/utils/debug.ts:8 
const DEBUG = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #824ea86969230518 — Environment-variable access.
repo/web/src/ee/features/in-app-agent/server/agent.ts:193 
    process.env.AWS_PROFILE ?? params.options.awsBedrock.profile;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c906124ecd697e1a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/web/src/ee/features/in-app-agent/server/agent.ts:751 
        url: new URL(LANGFUSE_DOCS_MCP_URL),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0466b61f84ac89f6 — Filesystem access.
repo/web/src/ee/features/in-app-agent/server/agent.ts:1245 
    const promptTemplate = await readFile(
      path.join(
        LOCAL_IN_APP_AGENT_SYSTEM_PROMPT_DIR,
        `${IN_APP_AGENT_SYSTEM_PROMPT_NAME}.txt`,
      ),
      "utf8",
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #4cfa9e02d68ed041 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/ee/features/in-app-agent/server/sandbox/providers/lambdaMicrovm.ts:199 
    const response = await fetch(
      `${normalizeEndpoint(session.endpoint)}/sandbox`,
      {
        method: "POST",
        headers: {
          "Content-Type": "application/json",
          "X-aws-proxy-port": String(DEFAULT_SANDBOX_SERVER_PORT),
          "X-aws-proxy-auth": session.authToken.value,
        },
        body: JSON.stringify({
          ...operation,
          toolCallFiles: session.toolCallFiles,
        }),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c3e1d839897d1944 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/ee/features/in-app-agent/server/sandbox/providers/lambdaMicrovm.ts:366 
      const response = await fetch(
        `${normalizeEndpoint(params.endpoint)}/health`,
        {
          headers: {
            "X-aws-proxy-port": String(DEFAULT_SANDBOX_SERVER_PORT),
            "X-aws-proxy-auth": (await createMicrovmAuthToken(params)).value,
          },
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #839591b5b8c89da1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/ee/features/multi-tenant-sso/validateSsoConfig.ts:103 
    resp = await fetch(discoveryUrl, {
      signal: AbortSignal.timeout(DISCOVERY_TIMEOUT_MS),
      redirect: "error",
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #9c49228d137c30b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:453 
      const response = await fetch(url, {
        method: "POST",
        headers: {
          "Content-Type": "application/json",
          Authorization: this.config.basicAuthHeader,
        },
        body: JSON.stringify(payload),
        signal: controller.signal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #605a5f6952a60129 — Environment-variable access.
repo/web/src/env.mjs:50 
      process.env.NODE_ENV === "production"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a26b7ab83ad7dab — Environment-variable access.
repo/web/src/env.mjs:58 
        process.env.VERCEL_URL && process.env.VERCEL_URL !== ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e44a3af752cd90da — Environment-variable access.
repo/web/src/env.mjs:59 
          ? process.env.VERCEL_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acfbdb53d5855667 — Environment-variable access.
repo/web/src/env.mjs:62 
      process.env.VERCEL ? z.string().min(1) : z.url(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f934fe00d968c337 — Environment-variable access.
repo/web/src/env.mjs:553 
    SEED_SECRET_KEY: process.env.SEED_SECRET_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5bb94b85391d873 — Environment-variable access.
repo/web/src/env.mjs:554 
    NEXT_PUBLIC_DEMO_PROJECT_ID: process.env.NEXT_PUBLIC_DEMO_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c4bca0a0c166bbc — Environment-variable access.
repo/web/src/env.mjs:555 
    NEXT_PUBLIC_DEMO_ORG_ID: process.env.NEXT_PUBLIC_DEMO_ORG_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eae56e1f8a435bcc — Environment-variable access.
repo/web/src/env.mjs:556 
    DATABASE_URL: process.env.DATABASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61b9f2b3d44ce2e3 — Environment-variable access.
repo/web/src/env.mjs:557 
    NODE_ENV: process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f481aa8bea30e299 — Environment-variable access.
repo/web/src/env.mjs:558 
    BUILD_ID: process.env.BUILD_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b3837bf20fa123c — Environment-variable access.
repo/web/src/env.mjs:559 
    NEXT_PUBLIC_BUILD_ID: process.env.NEXT_PUBLIC_BUILD_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6edec10140431f28 — Environment-variable access.
repo/web/src/env.mjs:560 
    NEXTAUTH_SECRET: process.env.NEXTAUTH_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52c940ff3a122ecb — Environment-variable access.
repo/web/src/env.mjs:561 
    NEXTAUTH_COOKIE_DOMAIN: process.env.NEXTAUTH_COOKIE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f204f38a2227342d — Environment-variable access.
repo/web/src/env.mjs:562 
    NEXTAUTH_COOKIE_NAME_SUFFIX: process.env.NEXTAUTH_COOKIE_NAME_SUFFIX,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0eed5fa78eb8a92e — Environment-variable access.
repo/web/src/env.mjs:563 
    NEXTAUTH_URL: process.env.NEXTAUTH_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cec255b12812df3 — Environment-variable access.
repo/web/src/env.mjs:564 
    LANGFUSE_MCP_ALLOWED_HOSTS: process.env.LANGFUSE_MCP_ALLOWED_HOSTS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d3250778166b05a — Environment-variable access.
repo/web/src/env.mjs:566 
      process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60d2700eeb732d18 — Environment-variable access.
repo/web/src/env.mjs:568 
      process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORT_CUTOFF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca68e4b95e2f4d8a — Environment-variable access.
repo/web/src/env.mjs:570 
      process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORTER_CUTOFF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31ce691a9763183b — Environment-variable access.
repo/web/src/env.mjs:571 
    NEXT_PUBLIC_SIGN_UP_DISABLED: process.env.NEXT_PUBLIC_SIGN_UP_DISABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0522d7bc094ee95 — Environment-variable access.
repo/web/src/env.mjs:573 
      process.env.LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb87ccc725de5e58 — Environment-variable access.
repo/web/src/env.mjs:574 
    AWS_ACCESS_KEY_ID: process.env.AWS_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dc6b83689e38a49 — Environment-variable access.
repo/web/src/env.mjs:575 
    AWS_SECRET_ACCESS_KEY: process.env.AWS_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22789d43e5b978fd — Environment-variable access.
repo/web/src/env.mjs:576 
    LANGFUSE_AWS_BEDROCK_REGION: process.env.LANGFUSE_AWS_BEDROCK_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #213a3b7382331819 — Environment-variable access.
repo/web/src/env.mjs:578 
      process.env.LANGFUSE_IN_APP_AGENT_AWS_PROFILE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b76bbe3e9fa80be — Environment-variable access.
repo/web/src/env.mjs:580 
      process.env.LANGFUSE_IN_APP_AGENT_SANDBOX_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccbac6ca156ac4ae — Environment-variable access.
repo/web/src/env.mjs:582 
      process.env
        .LANGFUSE_IN_APP_AGENT_SANDBOX_AWS_LAMBDA_MICROVM_IMAGE_IDENTIFIER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55f95ba4e067fc69 — Environment-variable access.
repo/web/src/env.mjs:585 
      process.env
        .LANGFUSE_IN_APP_AGENT_SANDBOX_AWS_LAMBDA_MICROVM_EXECUTION_ROLE_ARN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cf687783be8c11f — Environment-variable access.
repo/web/src/env.mjs:588 
      process.env
        .LANGFUSE_IN_APP_AGENT_SANDBOX_AWS_LAMBDA_MICROVM_EGRESS_NETWORK_CONNECTOR_ARN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07eb46d201a3150e — Environment-variable access.
repo/web/src/env.mjs:591 
      process.env.LANGFUSE_IN_APP_AGENT_SANDBOX_AWS_LAMBDA_MICROVM_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dce66cab140bc7bb — Environment-variable access.
repo/web/src/env.mjs:592 
    LANGFUSE_TEAM_SLACK_WEBHOOK: process.env.LANGFUSE_TEAM_SLACK_WEBHOOK,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f727d29a63ef684d — Environment-variable access.
repo/web/src/env.mjs:594 
      process.env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29983d3073ed6997 — Environment-variable access.
repo/web/src/env.mjs:595 
    LANGFUSE_ADMIN_ACCESS_WEBHOOK: process.env.LANGFUSE_ADMIN_ACCESS_WEBHOOK,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #015021c7ac16faa7 — Environment-variable access.
repo/web/src/env.mjs:596 
    MULESOFT_SFDC_USER_URL: process.env.MULESOFT_SFDC_USER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fabf9ad3287cc15f — Environment-variable access.
repo/web/src/env.mjs:597 
    MULESOFT_SFDC_ORG_URL: process.env.MULESOFT_SFDC_ORG_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9ddbd68cf74f004 — Environment-variable access.
repo/web/src/env.mjs:598 
    MULESOFT_SFDC_BASIC_AUTH_USER: process.env.MULESOFT_SFDC_BASIC_AUTH_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fd0f6c80552c27e — Environment-variable access.
repo/web/src/env.mjs:600 
      process.env.MULESOFT_SFDC_BASIC_AUTH_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1ebe9ecf191e4ff — Environment-variable access.
repo/web/src/env.mjs:602 
      process.env.MULESOFT_SFDC_DEFAULT_COMPANY_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ee317f3dd8766f7 — Environment-variable access.
repo/web/src/env.mjs:604 
      process.env.MULESOFT_SFDC_REQUEST_TIMEOUT_MS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #675f6562ab960d12 — Environment-variable access.
repo/web/src/env.mjs:605 
    SALT: process.env.SALT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #426a699b6c4dc0c8 — Environment-variable access.
repo/web/src/env.mjs:606 
    LANGFUSE_CSP_ENFORCE_HTTPS: process.env.LANGFUSE_CSP_ENFORCE_HTTPS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #feb5ab6715c51601 — Environment-variable access.
repo/web/src/env.mjs:607 
    TELEMETRY_ENABLED: process.env.TELEMETRY_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ca323455714140d — Environment-variable access.
repo/web/src/env.mjs:609 
    LANGFUSE_DEFAULT_ORG_ID: process.env.LANGFUSE_DEFAULT_ORG_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4493e2fdb9d90fd — Environment-variable access.
repo/web/src/env.mjs:610 
    LANGFUSE_DEFAULT_ORG_ROLE: process.env.LANGFUSE_DEFAULT_ORG_ROLE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e98887e55a89cdc2 — Environment-variable access.
repo/web/src/env.mjs:611 
    LANGFUSE_DEFAULT_PROJECT_ID: process.env.LANGFUSE_DEFAULT_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4d64b5ba382aa51 — Environment-variable access.
repo/web/src/env.mjs:612 
    LANGFUSE_DEFAULT_PROJECT_ROLE: process.env.LANGFUSE_DEFAULT_PROJECT_ROLE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdd58c467e48a09a — Environment-variable access.
repo/web/src/env.mjs:614 
    AUTH_GOOGLE_CLIENT_ID: process.env.AUTH_GOOGLE_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efc77e08e3884c58 — Environment-variable access.
repo/web/src/env.mjs:615 
    AUTH_GOOGLE_CLIENT_SECRET: process.env.AUTH_GOOGLE_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52b53a985f83092e — Environment-variable access.
repo/web/src/env.mjs:616 
    AUTH_GOOGLE_ALLOWED_DOMAINS: process.env.AUTH_GOOGLE_ALLOWED_DOMAINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cf7424dbf2a5baa — Environment-variable access.
repo/web/src/env.mjs:618 
      process.env.AUTH_GOOGLE_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cf5ac74928df33a — Environment-variable access.
repo/web/src/env.mjs:619 
    AUTH_GOOGLE_CLIENT_AUTH_METHOD: process.env.AUTH_GOOGLE_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcb0c14304196c5a — Environment-variable access.
repo/web/src/env.mjs:620 
    AUTH_GOOGLE_CHECKS: process.env.AUTH_GOOGLE_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c234b1c5261665c9 — Environment-variable access.
repo/web/src/env.mjs:622 
      process.env.AUTH_GOOGLE_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #296f88a259b7b922 — Environment-variable access.
repo/web/src/env.mjs:623 
    AUTH_GITHUB_CLIENT_ID: process.env.AUTH_GITHUB_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dde6d29c6eaea27 — Environment-variable access.
repo/web/src/env.mjs:624 
    AUTH_GITHUB_CLIENT_SECRET: process.env.AUTH_GITHUB_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8241dbafa5328f6 — Environment-variable access.
repo/web/src/env.mjs:626 
      process.env.AUTH_GITHUB_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ad13755f66b8bf9 — Environment-variable access.
repo/web/src/env.mjs:627 
    AUTH_GITHUB_CLIENT_AUTH_METHOD: process.env.AUTH_GITHUB_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59236a3768d8d4f5 — Environment-variable access.
repo/web/src/env.mjs:628 
    AUTH_GITHUB_CHECKS: process.env.AUTH_GITHUB_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2032b970dce9ba20 — Environment-variable access.
repo/web/src/env.mjs:630 
      process.env.AUTH_GITHUB_ENTERPRISE_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cdf25727b7f6408 — Environment-variable access.
repo/web/src/env.mjs:632 
      process.env.AUTH_GITHUB_ENTERPRISE_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbf0756bd2102979 — Environment-variable access.
repo/web/src/env.mjs:634 
      process.env.AUTH_GITHUB_ENTERPRISE_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #038c556ff8216f31 — Environment-variable access.
repo/web/src/env.mjs:636 
      process.env.AUTH_GITHUB_ENTERPRISE_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ba3c3e6ec9caf3e — Environment-variable access.
repo/web/src/env.mjs:638 
      process.env.AUTH_GITHUB_ENTERPRISE_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd3f6c195126c0f0 — Environment-variable access.
repo/web/src/env.mjs:639 
    AUTH_GITHUB_ENTERPRISE_CHECKS: process.env.AUTH_GITHUB_ENTERPRISE_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bbc8e852b0692d3 — Environment-variable access.
repo/web/src/env.mjs:640 
    AUTH_GITLAB_ISSUER: process.env.AUTH_GITLAB_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48bbfd3b2b8a07d2 — Environment-variable access.
repo/web/src/env.mjs:641 
    AUTH_GITLAB_CLIENT_ID: process.env.AUTH_GITLAB_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5afd00feac5ea33 — Environment-variable access.
repo/web/src/env.mjs:642 
    AUTH_GITLAB_CLIENT_SECRET: process.env.AUTH_GITLAB_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7185f1512e025ef9 — Environment-variable access.
repo/web/src/env.mjs:644 
      process.env.AUTH_GITLAB_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0cd272b73c12c3d — Environment-variable access.
repo/web/src/env.mjs:645 
    AUTH_GITLAB_CLIENT_AUTH_METHOD: process.env.AUTH_GITLAB_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bfafc4821d4a7c3 — Environment-variable access.
repo/web/src/env.mjs:646 
    AUTH_GITLAB_CHECKS: process.env.AUTH_GITLAB_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24f7cc8f20076817 — Environment-variable access.
repo/web/src/env.mjs:648 
      process.env.AUTH_GITLAB_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1bd02ae3ddcabf4 — Environment-variable access.
repo/web/src/env.mjs:649 
    AUTH_GITLAB_URL: process.env.AUTH_GITLAB_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3ef42382b52848d — Environment-variable access.
repo/web/src/env.mjs:650 
    AUTH_AZURE_AD_CLIENT_ID: process.env.AUTH_AZURE_AD_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfe2781f67ee073f — Environment-variable access.
repo/web/src/env.mjs:651 
    AUTH_AZURE_AD_CLIENT_SECRET: process.env.AUTH_AZURE_AD_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6da5cbf8043cc5fb — Environment-variable access.
repo/web/src/env.mjs:652 
    AUTH_AZURE_AD_TENANT_ID: process.env.AUTH_AZURE_AD_TENANT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f7388da4891f9fb — Environment-variable access.
repo/web/src/env.mjs:654 
      process.env.AUTH_AZURE_AD_ALLOW_ACCOUNT_LINKING ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edaf850fe44f242f — Environment-variable access.
repo/web/src/env.mjs:655 
      process.env.AUTH_AZURE_ALLOW_ACCOUNT_LINKING, // fallback on old env var

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b71538c5392841be — Environment-variable access.
repo/web/src/env.mjs:657 
      process.env.AUTH_AZURE_AD_CLIENT_AUTH_METHOD ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c1b7d0b4dbb523c — Environment-variable access.
repo/web/src/env.mjs:658 
      process.env.AUTH_AZURE_CLIENT_AUTH_METHOD, // fallback on old env var

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0ca0880c1ff2b9f — Environment-variable access.
repo/web/src/env.mjs:660 
      process.env.AUTH_AZURE_AD_CHECKS ?? process.env.AUTH_AZURE_CHECKS, // fallback on old env var

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95981a9a81520a51 — Environment-variable access.
repo/web/src/env.mjs:662 
      process.env.AUTH_AZURE_AD_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #439c24b1142823c7 — Environment-variable access.
repo/web/src/env.mjs:663 
    AUTH_OKTA_CLIENT_ID: process.env.AUTH_OKTA_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89a930adf98a28f6 — Environment-variable access.
repo/web/src/env.mjs:664 
    AUTH_OKTA_CLIENT_SECRET: process.env.AUTH_OKTA_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8202b667d55901f — Environment-variable access.
repo/web/src/env.mjs:665 
    AUTH_OKTA_ISSUER: process.env.AUTH_OKTA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cd6d303afd7267f — Environment-variable access.
repo/web/src/env.mjs:667 
      process.env.AUTH_OKTA_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d61295f2f05d6fa0 — Environment-variable access.
repo/web/src/env.mjs:668 
    AUTH_OKTA_CLIENT_AUTH_METHOD: process.env.AUTH_OKTA_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e82d11aa7d676e67 — Environment-variable access.
repo/web/src/env.mjs:669 
    AUTH_OKTA_CHECKS: process.env.AUTH_OKTA_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfb2275790489441 — Environment-variable access.
repo/web/src/env.mjs:671 
      process.env.AUTH_OKTA_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8c8abde84ccaeee — Environment-variable access.
repo/web/src/env.mjs:672 
    AUTH_AUTHENTIK_CLIENT_ID: process.env.AUTH_AUTHENTIK_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc76569292e23ca6 — Environment-variable access.
repo/web/src/env.mjs:673 
    AUTH_AUTHENTIK_CLIENT_SECRET: process.env.AUTH_AUTHENTIK_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd71492c33e51948 — Environment-variable access.
repo/web/src/env.mjs:674 
    AUTH_AUTHENTIK_ISSUER: process.env.AUTH_AUTHENTIK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e11a2a3c2d4a2f82 — Environment-variable access.
repo/web/src/env.mjs:676 
      process.env.AUTH_AUTHENTIK_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4545488ae2a8007 — Environment-variable access.
repo/web/src/env.mjs:678 
      process.env.AUTH_AUTHENTIK_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #746b1c0d14536019 — Environment-variable access.
repo/web/src/env.mjs:679 
    AUTH_AUTHENTIK_CHECKS: process.env.AUTH_AUTHENTIK_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3e180b2150a27ee — Environment-variable access.
repo/web/src/env.mjs:681 
      process.env.AUTH_AUTHENTIK_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edf64a8b05e33b81 — Environment-variable access.
repo/web/src/env.mjs:683 
      process.env.AUTH_AUTHENTIK_AUTHORIZATION_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a13930df4600270 — Environment-variable access.
repo/web/src/env.mjs:684 
    AUTH_ONELOGIN_CLIENT_ID: process.env.AUTH_ONELOGIN_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56fba564143866c3 — Environment-variable access.
repo/web/src/env.mjs:685 
    AUTH_ONELOGIN_CLIENT_SECRET: process.env.AUTH_ONELOGIN_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14574ad88bb641fe — Environment-variable access.
repo/web/src/env.mjs:686 
    AUTH_ONELOGIN_ISSUER: process.env.AUTH_ONELOGIN_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e82bcccbd90e764d — Environment-variable access.
repo/web/src/env.mjs:688 
      process.env.AUTH_ONELOGIN_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89de93c65bd85c4f — Environment-variable access.
repo/web/src/env.mjs:690 
      process.env.AUTH_ONELOGIN_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0f29186831109e9 — Environment-variable access.
repo/web/src/env.mjs:691 
    AUTH_ONELOGIN_CHECKS: process.env.AUTH_ONELOGIN_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20e1b4bdebf6efa1 — Environment-variable access.
repo/web/src/env.mjs:693 
      process.env.AUTH_ONELOGIN_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c709d6e3a5188f5 — Environment-variable access.
repo/web/src/env.mjs:694 
    AUTH_AUTH0_CLIENT_ID: process.env.AUTH_AUTH0_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ceaebe90fb4e7cda — Environment-variable access.
repo/web/src/env.mjs:695 
    AUTH_AUTH0_CLIENT_SECRET: process.env.AUTH_AUTH0_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9336dba930190d6f — Environment-variable access.
repo/web/src/env.mjs:696 
    AUTH_AUTH0_ISSUER: process.env.AUTH_AUTH0_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a26924ef33af7fc — Environment-variable access.
repo/web/src/env.mjs:698 
      process.env.AUTH_AUTH0_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57feb6409afae02d — Environment-variable access.
repo/web/src/env.mjs:699 
    AUTH_AUTH0_CLIENT_AUTH_METHOD: process.env.AUTH_AUTH0_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c5e3376e3394d4f — Environment-variable access.
repo/web/src/env.mjs:700 
    AUTH_AUTH0_CHECKS: process.env.AUTH_AUTH0_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b0e0a6ed789c044 — Environment-variable access.
repo/web/src/env.mjs:702 
      process.env.AUTH_AUTH0_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dca23852f866cb66 — Environment-variable access.
repo/web/src/env.mjs:704 
      process.env.AUTH_CLICKHOUSE_CLOUD_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62c4d79f1054677c — Environment-variable access.
repo/web/src/env.mjs:706 
      process.env.AUTH_CLICKHOUSE_CLOUD_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c228d432cb4797ff — Environment-variable access.
repo/web/src/env.mjs:707 
    AUTH_CLICKHOUSE_CLOUD_ISSUER: process.env.AUTH_CLICKHOUSE_CLOUD_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6db4c3edaf7b503f — Environment-variable access.
repo/web/src/env.mjs:709 
      process.env.AUTH_CLICKHOUSE_CLOUD_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61c88582ee75735f — Environment-variable access.
repo/web/src/env.mjs:711 
      process.env.AUTH_CLICKHOUSE_CLOUD_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a93642155ce0160d — Environment-variable access.
repo/web/src/env.mjs:712 
    AUTH_CLICKHOUSE_CLOUD_CHECKS: process.env.AUTH_CLICKHOUSE_CLOUD_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90e1f5e4e7e35064 — Environment-variable access.
repo/web/src/env.mjs:714 
      process.env.AUTH_CLICKHOUSE_CLOUD_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #863b0a4eaa5219f0 — Environment-variable access.
repo/web/src/env.mjs:715 
    AUTH_COGNITO_CLIENT_ID: process.env.AUTH_COGNITO_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a08f044403a5d558 — Environment-variable access.
repo/web/src/env.mjs:716 
    AUTH_COGNITO_CLIENT_SECRET: process.env.AUTH_COGNITO_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ce09089d4b6b677 — Environment-variable access.
repo/web/src/env.mjs:717 
    AUTH_COGNITO_ISSUER: process.env.AUTH_COGNITO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f77d34d4a7419361 — Environment-variable access.
repo/web/src/env.mjs:719 
      process.env.AUTH_COGNITO_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd4f23915f39a5d9 — Environment-variable access.
repo/web/src/env.mjs:721 
      process.env.AUTH_COGNITO_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be900fac80e414c8 — Environment-variable access.
repo/web/src/env.mjs:722 
    AUTH_COGNITO_CHECKS: process.env.AUTH_COGNITO_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfdc61555265fdd1 — Environment-variable access.
repo/web/src/env.mjs:724 
      process.env.AUTH_COGNITO_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1174ece09c91dd92 — Environment-variable access.
repo/web/src/env.mjs:725 
    AUTH_KEYCLOAK_CLIENT_ID: process.env.AUTH_KEYCLOAK_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e4b681077303515 — Environment-variable access.
repo/web/src/env.mjs:726 
    AUTH_KEYCLOAK_CLIENT_SECRET: process.env.AUTH_KEYCLOAK_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25783b83504f6d40 — Environment-variable access.
repo/web/src/env.mjs:727 
    AUTH_KEYCLOAK_ISSUER: process.env.AUTH_KEYCLOAK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c0bee6dcc640842 — Environment-variable access.
repo/web/src/env.mjs:729 
      process.env.AUTH_KEYCLOAK_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22245e682b06712f — Environment-variable access.
repo/web/src/env.mjs:731 
      process.env.AUTH_KEYCLOAK_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58b57c670bbdade4 — Environment-variable access.
repo/web/src/env.mjs:732 
    AUTH_KEYCLOAK_CHECKS: process.env.AUTH_KEYCLOAK_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3aad16e85c79d9e9 — Environment-variable access.
repo/web/src/env.mjs:734 
      process.env.AUTH_KEYCLOAK_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44bd7a2edcecd835 — Environment-variable access.
repo/web/src/env.mjs:735 
    AUTH_KEYCLOAK_SCOPE: process.env.AUTH_KEYCLOAK_SCOPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40f4b214cca5e0c8 — Environment-variable access.
repo/web/src/env.mjs:736 
    AUTH_KEYCLOAK_ID_TOKEN: process.env.AUTH_KEYCLOAK_ID_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0ad2b8b2da2f9ee — Environment-variable access.
repo/web/src/env.mjs:737 
    AUTH_KEYCLOAK_NAME: process.env.AUTH_KEYCLOAK_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #480be2bc8b7b52a6 — Environment-variable access.
repo/web/src/env.mjs:738 
    AUTH_JUMPCLOUD_CLIENT_ID: process.env.AUTH_JUMPCLOUD_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1859291c185cac0a — Environment-variable access.
repo/web/src/env.mjs:739 
    AUTH_JUMPCLOUD_CLIENT_SECRET: process.env.AUTH_JUMPCLOUD_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #258ca47b21201551 — Environment-variable access.
repo/web/src/env.mjs:740 
    AUTH_JUMPCLOUD_ISSUER: process.env.AUTH_JUMPCLOUD_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ddb42b10dd2939e — Environment-variable access.
repo/web/src/env.mjs:742 
      process.env.AUTH_JUMPCLOUD_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ca13caa6a3f639a — Environment-variable access.
repo/web/src/env.mjs:744 
      process.env.AUTH_JUMPCLOUD_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad0704600b3055cd — Environment-variable access.
repo/web/src/env.mjs:745 
    AUTH_JUMPCLOUD_CHECKS: process.env.AUTH_JUMPCLOUD_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47592a2ca68fe6e7 — Environment-variable access.
repo/web/src/env.mjs:747 
      process.env.AUTH_JUMPCLOUD_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19e2b8329901f03f — Environment-variable access.
repo/web/src/env.mjs:748 
    AUTH_JUMPCLOUD_SCOPE: process.env.AUTH_JUMPCLOUD_SCOPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32cbe22149a07ca2 — Environment-variable access.
repo/web/src/env.mjs:749 
    AUTH_CUSTOM_CLIENT_ID: process.env.AUTH_CUSTOM_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4c3400040700df6 — Environment-variable access.
repo/web/src/env.mjs:750 
    AUTH_CUSTOM_CLIENT_SECRET: process.env.AUTH_CUSTOM_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f84934ce43bc5639 — Environment-variable access.
repo/web/src/env.mjs:751 
    AUTH_CUSTOM_ISSUER: process.env.AUTH_CUSTOM_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1e9c24dca5ca9fe — Environment-variable access.
repo/web/src/env.mjs:752 
    AUTH_CUSTOM_NAME: process.env.AUTH_CUSTOM_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22c72b7de6c4df1f — Environment-variable access.
repo/web/src/env.mjs:753 
    AUTH_CUSTOM_SCOPE: process.env.AUTH_CUSTOM_SCOPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #368d9b1589b229b2 — Environment-variable access.
repo/web/src/env.mjs:754 
    AUTH_CUSTOM_CLIENT_AUTH_METHOD: process.env.AUTH_CUSTOM_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9cdca6506165201 — Environment-variable access.
repo/web/src/env.mjs:755 
    AUTH_CUSTOM_CHECKS: process.env.AUTH_CUSTOM_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #473b7007e0244872 — Environment-variable access.
repo/web/src/env.mjs:757 
      process.env.AUTH_CUSTOM_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #403f1bbc5ee49107 — Environment-variable access.
repo/web/src/env.mjs:759 
      process.env.AUTH_CUSTOM_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8abfb8535c9c927c — Environment-variable access.
repo/web/src/env.mjs:760 
    AUTH_CUSTOM_ID_TOKEN: process.env.AUTH_CUSTOM_ID_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73b444a7a6598f7d — Environment-variable access.
repo/web/src/env.mjs:761 
    AUTH_WORKOS_CLIENT_ID: process.env.AUTH_WORKOS_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e59a500c91565346 — Environment-variable access.
repo/web/src/env.mjs:762 
    AUTH_WORKOS_CLIENT_SECRET: process.env.AUTH_WORKOS_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab1821a8aee829ec — Environment-variable access.
repo/web/src/env.mjs:764 
      process.env.AUTH_WORKOS_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c349ab5e5fef254e — Environment-variable access.
repo/web/src/env.mjs:765 
    AUTH_WORKOS_ORGANIZATION_ID: process.env.AUTH_WORKOS_ORGANIZATION_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cffb3e0864d4add9 — Environment-variable access.
repo/web/src/env.mjs:766 
    AUTH_WORKOS_CONNECTION_ID: process.env.AUTH_WORKOS_CONNECTION_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab719df53feebeb1 — Environment-variable access.
repo/web/src/env.mjs:767 
    AUTH_WORDPRESS_CLIENT_ID: process.env.AUTH_WORDPRESS_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89e9b978202fa031 — Environment-variable access.
repo/web/src/env.mjs:768 
    AUTH_WORDPRESS_CLIENT_SECRET: process.env.AUTH_WORDPRESS_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11dabaec5e67f251 — Environment-variable access.
repo/web/src/env.mjs:770 
      process.env.AUTH_WORDPRESS_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #284b33c72aecf2e4 — Environment-variable access.
repo/web/src/env.mjs:772 
      process.env.AUTH_WORDPRESS_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93e342ea21abe7ab — Environment-variable access.
repo/web/src/env.mjs:773 
    AUTH_WORDPRESS_CHECKS: process.env.AUTH_WORDPRESS_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c82f23a6ec8f003 — Environment-variable access.
repo/web/src/env.mjs:775 
      process.env.AUTH_WORDPRESS_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfaf7123113224eb — Environment-variable access.
repo/web/src/env.mjs:776 
    AUTH_IGNORE_ACCOUNT_FIELDS: process.env.AUTH_IGNORE_ACCOUNT_FIELDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37f6bc93533365f7 — Environment-variable access.
repo/web/src/env.mjs:778 
      process.env.AUTH_DOMAINS_WITH_SSO_ENFORCEMENT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ccd1cc4c5033527 — Environment-variable access.
repo/web/src/env.mjs:779 
    AUTH_DISABLE_USERNAME_PASSWORD: process.env.AUTH_DISABLE_USERNAME_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c89926d03893c40 — Environment-variable access.
repo/web/src/env.mjs:780 
    AUTH_DISABLE_SIGNUP: process.env.AUTH_DISABLE_SIGNUP,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #030445107a26ecbe — Environment-variable access.
repo/web/src/env.mjs:782 
      process.env.AUTH_EMAIL_VERIFICATION_REQUIRED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5f73bef7e9cf47d — Environment-variable access.
repo/web/src/env.mjs:783 
    AUTH_SESSION_MAX_AGE: process.env.AUTH_SESSION_MAX_AGE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7999602fc6b8f3e — Environment-variable access.
repo/web/src/env.mjs:784 
    AUTH_HTTP_PROXY: process.env.AUTH_HTTP_PROXY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d82599ce42cfeeec — Environment-variable access.
repo/web/src/env.mjs:785 
    AUTH_HTTPS_PROXY: process.env.AUTH_HTTPS_PROXY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91649afb75d5fdb7 — Environment-variable access.
repo/web/src/env.mjs:786 
    AUTH_SSO_TIMEOUT: process.env.AUTH_SSO_TIMEOUT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8df80d9ce530dddc — Environment-variable access.
repo/web/src/env.mjs:788 
    EMAIL_FROM_ADDRESS: process.env.EMAIL_FROM_ADDRESS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93b5ded169f89af2 — Environment-variable access.
repo/web/src/env.mjs:789 
    SMTP_CONNECTION_URL: process.env.SMTP_CONNECTION_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c50882071da150a — Environment-variable access.
repo/web/src/env.mjs:791 
    OTEL_EXPORTER_OTLP_ENDPOINT: process.env.OTEL_EXPORTER_OTLP_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f76a988b75a5d5e2 — Environment-variable access.
repo/web/src/env.mjs:792 
    OTEL_SERVICE_NAME: process.env.OTEL_SERVICE_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #891bacfa9832c929 — Environment-variable access.
repo/web/src/env.mjs:793 
    OTEL_TRACE_SAMPLING_RATIO: process.env.OTEL_TRACE_SAMPLING_RATIO,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a00f5932f865b473 — Environment-variable access.
repo/web/src/env.mjs:796 
      process.env.LANGFUSE_INGESTION_MASKING_PROPAGATED_HEADERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bdc9b6f796528d9 — Environment-variable access.
repo/web/src/env.mjs:800 
      process.env.LANGFUSE_S3_MEDIA_MAX_CONTENT_LENGTH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #627e375747d4d21c — Environment-variable access.
repo/web/src/env.mjs:802 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_BUCKET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f220f9b256a470e — Environment-variable access.
repo/web/src/env.mjs:804 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_PREFIX,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #062bb7ed4ede9494 — Environment-variable access.
repo/web/src/env.mjs:806 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a7a25119d35f6ab — Environment-variable access.
repo/web/src/env.mjs:808 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61623e9132ba3e81 — Environment-variable access.
repo/web/src/env.mjs:810 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d99799f230b4e136 — Environment-variable access.
repo/web/src/env.mjs:812 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbc4506f119c44a9 — Environment-variable access.
repo/web/src/env.mjs:814 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f029481b134339c — Environment-variable access.
repo/web/src/env.mjs:816 
      process.env.LANGFUSE_S3_MEDIA_DOWNLOAD_URL_EXPIRY_SECONDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d3b7e1631fc80c5 — Environment-variable access.
repo/web/src/env.mjs:817 
    LANGFUSE_S3_MEDIA_UPLOAD_SSE: process.env.LANGFUSE_S3_MEDIA_UPLOAD_SSE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37ed2f70b3c24cd2 — Environment-variable access.
repo/web/src/env.mjs:819 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_SSE_KMS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4a4fc8b9b7f2990 — Environment-variable access.
repo/web/src/env.mjs:821 
    NEXT_PUBLIC_POSTHOG_KEY: process.env.NEXT_PUBLIC_POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc9e6bec7d9c49f1 — Environment-variable access.
repo/web/src/env.mjs:822 
    NEXT_PUBLIC_POSTHOG_HOST: process.env.NEXT_PUBLIC_POSTHOG_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #712f8c099cc70946 — Environment-variable access.
repo/web/src/env.mjs:824 
    NEXT_PUBLIC_PLAIN_APP_ID: process.env.NEXT_PUBLIC_PLAIN_APP_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f57a747328ebc5c — Environment-variable access.
repo/web/src/env.mjs:825 
    PLAIN_AUTHENTICATION_SECRET: process.env.PLAIN_AUTHENTICATION_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d7dffed3cb3ff3f — Environment-variable access.
repo/web/src/env.mjs:826 
    PLAIN_CARDS_API_TOKEN: process.env.PLAIN_CARDS_API_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ee5bec95738fc6c — Environment-variable access.
repo/web/src/env.mjs:827 
    PYLON_API_KEY: process.env.PYLON_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #716851f3f382f87a — Environment-variable access.
repo/web/src/env.mjs:829 
    CLICKHOUSE_URL: process.env.CLICKHOUSE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c7e069084cb394e — Environment-variable access.
repo/web/src/env.mjs:830 
    CLICKHOUSE_CLUSTER_NAME: process.env.CLICKHOUSE_CLUSTER_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca2ceea4088cc23c — Environment-variable access.
repo/web/src/env.mjs:831 
    CLICKHOUSE_DB: process.env.CLICKHOUSE_DB,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f313debaa633d595 — Environment-variable access.
repo/web/src/env.mjs:832 
    CLICKHOUSE_USER: process.env.CLICKHOUSE_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #734fee838f7350e0 — Environment-variable access.
repo/web/src/env.mjs:833 
    CLICKHOUSE_PASSWORD: process.env.CLICKHOUSE_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9001d7cc7ed3e74 — Environment-variable access.
repo/web/src/env.mjs:834 
    CLICKHOUSE_CLUSTER_ENABLED: process.env.CLICKHOUSE_CLUSTER_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f071a8c711d63fd1 — Environment-variable access.
repo/web/src/env.mjs:836 
    LANGFUSE_UI_API_HOST: process.env.LANGFUSE_UI_API_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a699df0841cf20b8 — Environment-variable access.
repo/web/src/env.mjs:837 
    LANGFUSE_UI_DOCUMENTATION_HREF: process.env.LANGFUSE_UI_DOCUMENTATION_HREF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e79a26d63a2ab491 — Environment-variable access.
repo/web/src/env.mjs:838 
    LANGFUSE_UI_SUPPORT_HREF: process.env.LANGFUSE_UI_SUPPORT_HREF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13e66ebd65837160 — Environment-variable access.
repo/web/src/env.mjs:839 
    LANGFUSE_UI_FEEDBACK_HREF: process.env.LANGFUSE_UI_FEEDBACK_HREF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40322496f93f099b — Environment-variable access.
repo/web/src/env.mjs:841 
      process.env.LANGFUSE_UI_LOGO_LIGHT_MODE_HREF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57dfcbf7dc6b79bb — Environment-variable access.
repo/web/src/env.mjs:843 
      process.env.LANGFUSE_UI_LOGO_DARK_MODE_HREF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e71f04cf667d1756 — Environment-variable access.
repo/web/src/env.mjs:845 
      process.env.LANGFUSE_UI_DEFAULT_MODEL_ADAPTER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0228643a6bfc14f — Environment-variable access.
repo/web/src/env.mjs:847 
      process.env.LANGFUSE_UI_DEFAULT_BASE_URL_OPENAI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d96f05566b0874a — Environment-variable access.
repo/web/src/env.mjs:849 
      process.env.LANGFUSE_UI_DEFAULT_BASE_URL_ANTHROPIC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eee4059b2d690aaf — Environment-variable access.
repo/web/src/env.mjs:851 
      process.env.LANGFUSE_UI_DEFAULT_BASE_URL_AZURE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53247cf85d1d3f7e — Environment-variable access.
repo/web/src/env.mjs:853 
      process.env.LANGFUSE_UI_VISIBLE_PRODUCT_MODULES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9dad31f105eb3c54 — Environment-variable access.
repo/web/src/env.mjs:855 
      process.env.LANGFUSE_UI_HIDDEN_PRODUCT_MODULES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6957acb79bc834a6 — Environment-variable access.
repo/web/src/env.mjs:858 
      process.env.NEXT_PUBLIC_LANGFUSE_PLAYGROUND_STREAMING_ENABLED_DEFAULT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e385aeed418cd239 — Environment-variable access.
repo/web/src/env.mjs:860 
    LANGFUSE_EE_LICENSE_KEY: process.env.LANGFUSE_EE_LICENSE_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3746fea8d750db7a — Environment-variable access.
repo/web/src/env.mjs:861 
    ADMIN_API_KEY: process.env.ADMIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0397b9075720a5d9 — Environment-variable access.
repo/web/src/env.mjs:862 
    ENCRYPTION_KEY: process.env.ENCRYPTION_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fd270df9ef4dbf5 — Environment-variable access.
repo/web/src/env.mjs:864 
    LANGFUSE_CACHE_API_KEY_ENABLED: process.env.LANGFUSE_CACHE_API_KEY_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #774062b69d41f0a4 — Environment-variable access.
repo/web/src/env.mjs:866 
      process.env.LANGFUSE_CACHE_API_KEY_TTL_SECONDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2d93a2df1d39f4c — Environment-variable access.
repo/web/src/env.mjs:868 
      process.env.LANGFUSE_ALLOWED_ORGANIZATION_CREATORS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f96f1fcce2a9d65 — Environment-variable access.
repo/web/src/env.mjs:869 
    STRIPE_SECRET_KEY: process.env.STRIPE_SECRET_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a583418221dbe68 — Environment-variable access.
repo/web/src/env.mjs:870 
    STRIPE_WEBHOOK_SIGNING_SECRET: process.env.STRIPE_WEBHOOK_SIGNING_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3549008b7d29765 — Environment-variable access.
repo/web/src/env.mjs:871 
    SENTRY_AUTH_TOKEN: process.env.SENTRY_AUTH_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d400a615cf8ab87 — Environment-variable access.
repo/web/src/env.mjs:872 
    SENTRY_CSP_REPORT_URI: process.env.SENTRY_CSP_REPORT_URI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cbc6ca01225b157 — Environment-variable access.
repo/web/src/env.mjs:873 
    LANGFUSE_RATE_LIMITS_ENABLED: process.env.LANGFUSE_RATE_LIMITS_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f12e6496fbcf31fb — Environment-variable access.
repo/web/src/env.mjs:875 
    LANGFUSE_INIT_ORG_ID: process.env.LANGFUSE_INIT_ORG_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d148e6eafdae3af — Environment-variable access.
repo/web/src/env.mjs:876 
    LANGFUSE_INIT_ORG_NAME: process.env.LANGFUSE_INIT_ORG_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cbc955727f00647 — Environment-variable access.
repo/web/src/env.mjs:877 
    LANGFUSE_INIT_ORG_CLOUD_PLAN: process.env.LANGFUSE_INIT_ORG_CLOUD_PLAN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e15d0d3d7256c54 — Environment-variable access.
repo/web/src/env.mjs:878 
    LANGFUSE_INIT_PROJECT_ID: process.env.LANGFUSE_INIT_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb099b4d631c5f31 — Environment-variable access.
repo/web/src/env.mjs:879 
    LANGFUSE_INIT_PROJECT_NAME: process.env.LANGFUSE_INIT_PROJECT_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7263b52ee71241b1 — Environment-variable access.
repo/web/src/env.mjs:881 
      process.env.LANGFUSE_INIT_PROJECT_RETENTION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3971d4ab633ff486 — Environment-variable access.
repo/web/src/env.mjs:883 
      process.env.LANGFUSE_INIT_PROJECT_PUBLIC_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3f9297d40231ccc — Environment-variable access.
repo/web/src/env.mjs:885 
      process.env.LANGFUSE_INIT_PROJECT_SECRET_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8210c008d7f8dfbc — Environment-variable access.
repo/web/src/env.mjs:886 
    LANGFUSE_INIT_USER_EMAIL: process.env.LANGFUSE_INIT_USER_EMAIL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe1b8bf564bf49cb — Environment-variable access.
repo/web/src/env.mjs:887 
    LANGFUSE_INIT_USER_NAME: process.env.LANGFUSE_INIT_USER_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #979a690d6d7e7f5c — Environment-variable access.
repo/web/src/env.mjs:888 
    LANGFUSE_INIT_USER_PASSWORD: process.env.LANGFUSE_INIT_USER_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10453d9aa45b9fcc — Environment-variable access.
repo/web/src/env.mjs:889 
    NEXT_PUBLIC_BASE_PATH: process.env.NEXT_PUBLIC_BASE_PATH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36a9c3eca2da7e4f — Environment-variable access.
repo/web/src/env.mjs:891 
      process.env.LANGFUSE_MAX_HISTORIC_EVAL_CREATION_LIMIT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7338b284f5df1722 — Environment-variable access.
repo/web/src/env.mjs:892 
    SLACK_CLIENT_ID: process.env.SLACK_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #409ddf501b820737 — Environment-variable access.
repo/web/src/env.mjs:893 
    SLACK_CLIENT_SECRET: process.env.SLACK_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f75a69f32d70841c — Environment-variable access.
repo/web/src/env.mjs:894 
    SLACK_STATE_SECRET: process.env.SLACK_STATE_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cd1b2e075d5ea5a — Environment-variable access.
repo/web/src/env.mjs:897 
    LANGFUSE_AWS_BEDROCK_MODEL: process.env.LANGFUSE_AWS_BEDROCK_MODEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d23a1d1aa371d071 — Environment-variable access.
repo/web/src/env.mjs:899 
      process.env.LANGFUSE_AWS_BEDROCK_SMALL_MODEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b35e50f9ed4be66 — Environment-variable access.
repo/web/src/env.mjs:902 
    LANGFUSE_AI_FEATURES_HOST: process.env.LANGFUSE_AI_FEATURES_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc0a2890c3b8bcf6 — Environment-variable access.
repo/web/src/env.mjs:906 
      process.env.LANGFUSE_SKIP_FINAL_FOR_OTEL_PROJECTS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e179b66d13742bcc — Environment-variable access.
repo/web/src/env.mjs:910 
      process.env.LANGFUSE_AI_FEATURES_PUBLIC_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a3b568636878098 — Environment-variable access.
repo/web/src/env.mjs:912 
      process.env.LANGFUSE_AI_FEATURES_SECRET_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #464f03941e333980 — Environment-variable access.
repo/web/src/env.mjs:914 
      process.env.LANGFUSE_AI_FEATURES_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed1da768387a176f — Environment-variable access.
repo/web/src/env.mjs:917 
      process.env.LANGFUSE_API_TRACES_DEFAULT_DATE_RANGE_DAYS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64cb6a8ec861cd23 — Environment-variable access.
repo/web/src/env.mjs:919 
      process.env.LANGFUSE_API_TRACES_REJECT_NO_DATE_RANGE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2f71a789da448f4 — Environment-variable access.
repo/web/src/env.mjs:921 
      process.env.LANGFUSE_API_TRACES_DEFAULT_FIELDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0473c54c7fdcfd5 — Environment-variable access.
repo/web/src/env.mjs:923 
      process.env.LANGFUSE_API_TRACEBYID_DEFAULT_FIELDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e43bd2117b85a4da — Environment-variable access.
repo/web/src/env.mjs:925 
      process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf88c24221a42ab8 — Environment-variable access.
repo/web/src/env.mjs:927 
      process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0b28a86a6c53f0d — Environment-variable access.
repo/web/src/env.mjs:930 
      process.env.LANGFUSE_DISABLE_LEGACY_TRACING_IO_SEARCH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd17ed3a3c81dce5 — Environment-variable access.
repo/web/src/env.mjs:932 
      process.env.LANGFUSE_OBSERVATIONS_V2_SUBQUERY_REWRITE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d9cc3cd30e0953a — Environment-variable access.
repo/web/src/env.mjs:934 
      process.env.LANGFUSE_OBSERVATIONS_V2_SHADOW_QUERY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8a0a9eb6a487737 — Environment-variable access.
repo/web/src/env.mjs:936 
      process.env.LANGFUSE_OBSERVATIONS_V2_SHADOW_QUERY_SAMPLE_RATE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #daa1714a06fa9b4e — Environment-variable access.
repo/web/src/env.mjs:938 
      process.env.LANGFUSE_BLOCKED_USERIDS_CHATCOMPLETION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9412e6d9ef8cf9d4 — Environment-variable access.
repo/web/src/env.mjs:942 
  skipValidation: process.env.DOCKER_BUILD === "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #94d1e0c34c50c6da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116 
    await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
      method: "POST",
      body: JSON.stringify({
        name: body.name,
        email: body.email,
        referralSource: body.referralSource,
        cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
        userId: userId,
      }),
      headers: {
        "Content-Type": "application/json",
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #67f713215b3dc9fa — Hardcoded external endpoint. Review what data is sent to this destination.
repo/web/src/features/cloud-status-notification/server/cloud-status-router.ts:49 
        const response = await fetch(
          "https://status.langfuse.com/api/v1/summary",
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #988e0210c68240e8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/datasets/hooks/useDatasetItemMediaUpload.ts:118 
          const response = await fetch(uploadUrl, {
            method: "PUT",
            body: file,
            headers,
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #ee2c9403ba9e0b9a — Environment-variable access.
repo/web/src/features/entitlements/server/getPlan.ts:12 
  if (process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #57d1a0ca633905ab — Environment-variable access.
repo/web/src/features/evals/server/evaluator-preflight.ts:62 
    process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION === "true" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e709b65d2c08e2b7 — Environment-variable access.
repo/web/src/features/evals/server/evaluator-preflight.ts:63 
    process.env.NODE_ENV === "test" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #44613f010ec43f09 — Environment-variable access.
repo/web/src/features/evals/server/evaluator-preflight.ts:64 
    process.env.DATABASE_URL?.includes("langfuse_test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #103e60110543b8c0 — Filesystem access.
repo/web/src/features/evals/utils/code-eval-template-starter-examples.clienttest.ts:22 
      module: readFileSync(
        require.resolve("@astral-sh/ruff-wasm-web/ruff_wasm_bg.wasm"),
      ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35e6359c15d1e5ef — Environment-variable access.
repo/web/src/features/events/lib/v4Rollout.clienttest.ts:6 
  const originalRegion = process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab12c1a9f973d437 — Environment-variable access.
repo/web/src/features/events/lib/v4Rollout.clienttest.ts:18 
    process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION = "US";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e255b2c988cc372c — Environment-variable access.
repo/web/src/features/events/lib/v4Rollout.clienttest.ts:22 
    process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION = originalRegion;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #325a3a1f116765d3 — Environment-variable access.
repo/web/src/features/events/lib/v4Rollout.ts:52 
  if (process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION === "DEV") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc989415fb939445 — Environment-variable access.
repo/web/src/features/experiments/components/table/ExperimentsTable.tsx:862 
                    const fullUrl = `${process.env.NEXT_PUBLIC_BASE_PATH ?? ""}${experimentUrl}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0dc44819a958085 — Environment-variable access.
repo/web/src/features/mcp/server/security.ts:57 
      process.env.PORT ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #cf3f8d4f49f367a2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/playground/page/context/index.tsx:779 
  const result = await fetch(
    `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/chatCompletion`,
    {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body,
    },
  );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #81a85da73da4233a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/playground/page/context/index.tsx:824 
  const result = await fetch(
    `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/chatCompletion`,
    {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body,
    },
  );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #55b8f739e97191e5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/playground/page/context/index.tsx:872 
  const result = await fetch(
    `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/chatCompletion`,
    {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body,
    },
  );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3537cfdbdab69bf9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/playground/page/context/index.tsx:932 
  const result = await fetch(
    `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/chatCompletion`,
    {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body,
    },
  );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #745c8f4b02fe8c20 — Environment-variable access.
repo/web/src/features/posthog-analytics/ServerPosthog.ts:22 
      if (process.env.NODE_ENV === "development") this.posthog.debug();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #307e624d44b6f792 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/slack/server/slack-webhook.ts:7 
  return await fetch(env.LANGFUSE_TEAM_SLACK_WEBHOOK, {
    method: "POST",
    body: JSON.stringify({ rawBody: JSON.stringify(message, null, 2) }),
    headers: {
      "Content-Type": "application/json",
    },
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #bf1bb91a0b3a5c2a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/web/src/features/support-chat/pylon/pylonClient.ts:65 
  const res = await fetch(`${PYLON_API_BASE}/issues`, {
    method: "POST",
    headers: {
      Authorization: `Bearer ${apiKey}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify(body),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #474593f57f314168 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/web/src/features/support-chat/pylon/pylonClient.ts:117 
  const res = await fetch(`${PYLON_API_BASE}/attachments`, {
    method: "POST",
    headers: {
      Authorization: `Bearer ${apiKey}`,
    },
    body: formData,
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #dcc465d1ca0a54be — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/support-chat/pylon/pylonClient.ts:153 
  const res = await fetch(`${PYLON_API_BASE}/accounts/${accountId}`, {
    method: "PATCH",
    headers: {
      Authorization: `Bearer ${apiKey}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ custom_fields: customFields }),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d5d220dcc16b9d36 — Environment-variable access.
repo/web/src/features/telemetry/index.ts:23 
    if (process.env.NODE_ENV !== "production") return;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41d6fcc83e4ee4ab — Environment-variable access.
repo/web/src/features/telemetry/index.ts:33 
    if (process.env.CI) return;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #039410d842dd81c1 — Environment-variable access.
repo/web/src/features/telemetry/index.ts:271 
          environment: process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #932056726dfaa980 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/hooks/useSSEDashboardQuery.ts:108 
        const resp = await fetch(
          `${basePath}/api/dashboard/execute-query-stream`,
          {
            method: "POST",
            headers: { "Content-Type": "application/json" },
            body: JSON.stringify(inputRef.current),
            signal,
          },
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #cad8e27eb80b31ab — Environment-variable access.
repo/web/src/instrumentation.ts:6 
    process.env.NEXT_PUBLIC_LANGFUSE_RUN_NEXT_INIT !== undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35abf89dd798fe6e — Environment-variable access.
repo/web/src/instrumentation.ts:7 
      ? process.env.NEXT_PUBLIC_LANGFUSE_RUN_NEXT_INIT === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2ca4bae6555b639 — Environment-variable access.
repo/web/src/instrumentation.ts:10 
  if (process.env.NEXT_RUNTIME === "nodejs" && isInitLoadingEnabled) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5be99a7fe275689a — Environment-variable access.
repo/web/src/pages/_app.tsx:92 
  process.env.NEXT_PUBLIC_POSTHOG_KEY &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #113db1c9a478b75e — Environment-variable access.
repo/web/src/pages/_app.tsx:93 
  process.env.NEXT_PUBLIC_POSTHOG_HOST

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e838b01ffb62b223 — Environment-variable access.
repo/web/src/pages/_app.tsx:95 
  posthog.init(process.env.NEXT_PUBLIC_POSTHOG_KEY, {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c81d66a99c8dba15 — Environment-variable access.
repo/web/src/pages/_app.tsx:96 
    api_host: process.env.NEXT_PUBLIC_POSTHOG_HOST || "https://eu.posthog.com",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07176135079349d3 — Environment-variable access.
repo/web/src/pages/_app.tsx:100 
      if (process.env.NODE_ENV === "development") posthog.debug();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #587949715be04ed2 — Environment-variable access.
repo/web/src/pages/_app.tsx:209 
          environment: process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a76d2396b5dadda7 — Environment-variable access.
repo/web/src/pages/_app.tsx:261 
  process.env.NEXT_RUNTIME === "nodejs" &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2b2f6b55b57816e — Environment-variable access.
repo/web/src/pages/_app.tsx:262 
  process.env.NEXT_MANUAL_SIG_HANDLE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ab71ae2e71d78ace — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/api/auth/signup-verify.ts:96 
      await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
        method: "POST",
        body: JSON.stringify({
          name,
          email: normalizedEmail,
          cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
          userId: newUser.id,
        }),
        headers: {
          "Content-Type": "application/json",
        },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c56a7f9839ad042d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/auth/enterprise-sso-required.tsx:92 
      const response = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #4e05283102622dc2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/auth/sign-in.tsx:677 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c125e2e3325d6927 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/auth/sign-up.tsx:149 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8a148c741e8b2b50 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/auth/sign-up.tsx:196 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/signup`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify(values),
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #f6df7d94c7647f8e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/auth/sign-up.tsx:350 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/signup-verify`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ email: values.email, name: values.name }),
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ea2cb74e53088e7b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/server/adminAccessWebhook.ts:57 
    const response = await fetch(env.LANGFUSE_ADMIN_ACCESS_WEBHOOK, {
      method: "POST",
      body: JSON.stringify(payload),
      headers: {
        "Content-Type": "application/json",
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #508b0165e26d1703 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/server/api/routers/public.ts:33 
      const response = await fetch(
        `https://langfuse.com/api/latest-releases?repo=langfuse/langfuse&version=${VERSION}`,
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3db8fb5bae7b14cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/server/auth.ts:1119 
          await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
            method: "POST",
            body: JSON.stringify({
              name: user.name,
              email: user.email,
              cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
              userId: user.id,
              // referralSource: ...
            }),
            headers: {
              "Content-Type": "application/json",
            },
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #ba4b3055a1b664ec — Environment-variable access.
repo/web/src/server/utils/cookies.ts:13 
  env.NEXTAUTH_URL.startsWith("https://") || process.env.VERCEL === "1";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7dc7d40d099d2cd1 — Environment-variable access.
repo/web/src/utils/api.ts:37 
      : process.env.VERCEL_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f865d500e6c2109d — Environment-variable access.
repo/web/src/utils/api.ts:38 
        ? `https://${process.env.VERCEL_URL}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c502212212e08f33 — Environment-variable access.
repo/web/src/utils/api.ts:39 
        : `http://localhost:${process.env.PORT ?? 3000}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57de5dbfcb10e039 — Environment-variable access.
repo/web/src/utils/api.ts:169 
        !!process.env.NEXT_PUBLIC_BUILD_ID &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f649000624d0fce5 — Environment-variable access.
repo/web/src/utils/api.ts:170 
        buildId !== process.env.NEXT_PUBLIC_BUILD_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #feafce21e79be380 — Environment-variable access.
repo/web/src/utils/api.ts:316 
          enabled: () => process.env.NODE_ENV === "development",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62747fa63ed3c845 — Environment-variable access.
repo/web/src/utils/api.ts:401 
      enabled: () => process.env.NODE_ENV === "development",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d02150a0251f0db4 — Environment-variable access.
repo/web/src/utils/shutdown.ts:29 
  Boolean(process.env.NEXT_MANUAL_SIG_HANDLE) && globalThis.sigtermReceived;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): worker

npm first-party
medium telemetry production #a581cb6547dd0149 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:36 
  const hadEvents = mixpanel.getBatchSize() > 0;

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #5d52e1920b83860b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:37 
  await mixpanel.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a61319500c12ea2e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:76 
    mixpanel.addEvent(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #496d6839d41d6626 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:111 
    mixpanel.addEvent(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e6e2462a82314feb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:146 
    mixpanel.addEvent(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #810e6d644abb3d66 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:180 
    mixpanel.addEvent(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #870d541d173a0a57 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:299 
      bytes: mixpanel.getSerializedBytes(),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e4324e27010069a4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:21 
import { PostHog } from "posthog-node";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #8805bc84ac0178e4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:94 
  posthog.on("error", (error) => {
    logger.error(
      `[POSTHOG] Error sending traces to PostHog for project ${config.projectId}: ${error}`,
    );
    sendError = error instanceof Error ? error : new Error(String(error));
  });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #35faa3389eb38aa0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:106 
    posthog.capture(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #fecd0780e546b2bb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:108 
      await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #6d37555c117bdcf2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:115 
  await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #fa0f8f37bd653726 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:143 
  posthog.on("error", (error) => {
    logger.error(
      `[POSTHOG] Error sending generations to PostHog for project ${config.projectId}: ${error}`,
    );
    sendError = error instanceof Error ? error : new Error(String(error));
  });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #bfe3228f1f2de8a8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:155 
    posthog.capture(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #3d6aeb9b70bdc736 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:157 
      await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #ff34bd2914b3e363 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:164 
  await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #86006901bf4887e0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:192 
  posthog.on("error", (error) => {
    logger.error(
      `[POSTHOG] Error sending scores to PostHog for project ${config.projectId}: ${error}`,
    );
    sendError = error instanceof Error ? error : new Error(String(error));
  });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #11ece90bb5124bc5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:204 
    posthog.capture(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #1c6009d378f97c68 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:206 
      await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d0b30d5dd6fe2308 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:213 
  await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #c42abaaf6937a80b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:240 
  posthog.on("error", (error) => {
    logger.error(
      `[POSTHOG] Error sending events to PostHog for project ${config.projectId}: ${error}`,
    );
    sendError = error instanceof Error ? error : new Error(String(error));
  });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e6e2263bc296f793 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:252 
    posthog.capture(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e968562cd9e2fd05 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:254 
      await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #7f1fef9fd572c7d2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:260 
  await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 154 low-confidence finding(s)
low env_fs test-only Excluded from app score #1d0bbc0239fbf45a — Environment-variable access.
repo/worker/src/__tests__/batchAction.test.ts:41 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #156ba19d82c0a058 — Environment-variable access.
repo/worker/src/__tests__/batchExport.test.ts:30 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7ac354a6cc92a9f9 — Environment-variable access.
repo/worker/src/__tests__/batchExport.test.ts:32 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #73bc52b3978a2bea — Environment-variable access.
repo/worker/src/__tests__/batchExport.test.ts:35 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #565b2666ec18c3c2 — Environment-variable access.
repo/worker/src/__tests__/blobStorageIntegrationProcessing.test.ts:13 
  const cloudRegion = process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b252b8e469834a34 — Environment-variable access.
repo/worker/src/__tests__/blobStorageIntegrationProcessing.test.ts:14 
  delete process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b047e6157cf2611b — Environment-variable access.
repo/worker/src/__tests__/blobStorageIntegrationProcessing.test.ts:77 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a2d08cb1b685c59d — Environment-variable access.
repo/worker/src/__tests__/blobStorageIntegrationProcessing.test.ts:116 
      process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION = originalCloudRegion;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2d45a9f5fcb8e0d0 — Environment-variable access.
repo/worker/src/__tests__/blobStorageIntegrationProcessing.test.ts:118 
      delete process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1ead674236c693a1 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:22 
  delete process.env.REDIS_CLUSTER_NODES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9e013d131a116c60 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:23 
  delete process.env.REDIS_SENTINEL_NODES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9f1538f944517560 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:24 
  delete process.env.REDIS_SENTINEL_MASTER_NAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b6da971866538025 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:25 
  delete process.env.REDIS_SENTINEL_USERNAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cfab7390f1fcddc5 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:26 
  delete process.env.REDIS_SENTINEL_PASSWORD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #96e5af730d2c50eb — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:38 
    process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8994fe70b45366a8 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:100 
    delete process.env.LANGFUSE_BULLMQ_SKIP_REDIS_VERSION_CHECK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5ac4abfa5902197b — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:115 
    process.env.LANGFUSE_BULLMQ_SKIP_REDIS_VERSION_CHECK = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #867f8e0f92e95944 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:139 
    process.env.LANGFUSE_BULLMQ_SKIP_REDIS_VERSION_CHECK = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #c388dd93e83b75a1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/worker/src/__tests__/chatml/framework-traces/download_traces.js:119 
  const res = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #b4a00dd5b0406c61 — Filesystem access.
repo/worker/src/__tests__/chatml/framework-traces/download_traces.js:225 
    fs.writeFileSync(path.join(__dirname, fileName), content, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1f7ffc2dabe3c826 — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:2 
import { readFileSync, existsSync, writeFileSync, readdirSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9c35f2c7d57eb43b — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:535 
      const traceContent = readFileSync(traceFilePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #02a095f0060af1a9 — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:544 
        writeFileSync(expectedFilePath, JSON.stringify({}, null, 2), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d53da6f581cbc236 — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:549 
      const expectedContent = readFileSync(expectedFilePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2b37214d4b92cef4 — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:636 
    const expectedContent = readFileSync(expectedFilePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0b4906c08a73fdc7 — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:640 
    writeFileSync(expectedFilePath, JSON.stringify({}, null, 2), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #865b50b92c39be9e — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:646 
  writeFileSync(expectedFilePath, JSON.stringify(expected, null, 2), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e706198adb1a0130 — Environment-variable access.
repo/worker/src/__tests__/encryption.test.ts:8 
const originalEnv = process.env.ENCRYPTION_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #eca492de18a886bc — Environment-variable access.
repo/worker/src/__tests__/encryption.test.ts:12 
  process.env.ENCRYPTION_KEY =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #446690dff7337dc0 — Environment-variable access.
repo/worker/src/__tests__/encryption.test.ts:18 
  process.env.ENCRYPTION_KEY = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #585764ea7b98e65f — Environment-variable access.
repo/worker/src/__tests__/evalService.filtering.test.ts:21 
let OPENAI_API_KEY = process.env.OPENAI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0db1fecb7d81be1c — Environment-variable access.
repo/worker/src/__tests__/evalService.filtering.test.ts:25 
  OPENAI_API_KEY || process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #777d35969ea7732e — Environment-variable access.
repo/worker/src/__tests__/evalService.test.ts:49 
let OPENAI_API_KEY = process.env.OPENAI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d71a790c9fa75d92 — Environment-variable access.
repo/worker/src/__tests__/evalService.test.ts:53 
  OPENAI_API_KEY || process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c9cc50d513c77088 — Environment-variable access.
repo/worker/src/__tests__/event-stream-score-filters.test.ts:19 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #708ae08bebbe9fd2 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/ingestionMasking.test.ts:86 
      http.post("https://masking.example.com/success", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: await request.json(),
        });
        return HttpResponse.json(maskedSpanData, { status: 200 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #bc3573e21be27a92 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/ingestionMasking.test.ts:97 
      http.post("https://masking.example.com/echo", async ({ request }) => {
        const body = await request.json();
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body,
        });
        return HttpResponse.json(body, { status: 200 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #ccc127d8d67facf0 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/ingestionMasking.test.ts:109 
      http.post("https://masking.example.com/error", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: await request.json(),
        });
        return HttpResponse.json(
          { error: "Internal Server Error" },
          { status: 500 },
        );
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #1f7960c1ce3a8390 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/ingestionMasking.test.ts:123 
      http.post("https://masking.example.com/timeout", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: await request.json(),
        });
        // Delay longer than the timeout
        await delay(5000);
        return HttpResponse.json(maskedSpanData, { status: 200 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #7cef2c2afb25390e — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:282 
      if (!process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #fb089a0421950cdf — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:310 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1169f328eeb3f5f6 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:336 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3ba6371051c53a26 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:362 
        secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #29feda1c9bbab439 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:387 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #33e0f4556ab85265 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:401 
      if (!process.env.LANGFUSE_LLM_CONNECTION_ANTHROPIC_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0e5e33283eb9454e — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:430 
            process.env.LANGFUSE_LLM_CONNECTION_ANTHROPIC_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cb1515a7efe96fd7 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:458 
            process.env.LANGFUSE_LLM_CONNECTION_ANTHROPIC_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #184f8d058655a70d — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:485 
        secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_ANTHROPIC_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b7eb770f08395897 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:511 
            process.env.LANGFUSE_LLM_CONNECTION_ANTHROPIC_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bf0762c25927a41c — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:524 
      if (!process.env.LANGFUSE_LLM_CONNECTION_AZURE_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d59acbcca23b25fc — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:531 
      if (!process.env.LANGFUSE_LLM_CONNECTION_AZURE_BASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #dc8569f9aec36bfd — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:538 
      if (!process.env.LANGFUSE_LLM_CONNECTION_AZURE_MODEL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f4abb0369efca1cc — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:561 
          model: process.env.LANGFUSE_LLM_CONNECTION_AZURE_MODEL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bf9d27ee58bc05d6 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:566 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_AZURE_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #78a27ef5e766dd95 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:567 
          baseURL: process.env.LANGFUSE_LLM_CONNECTION_AZURE_BASE_URL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0941bc574eb82fb5 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:588 
          model: process.env.LANGFUSE_LLM_CONNECTION_AZURE_MODEL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #711cd43c338e5d5b — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:593 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_AZURE_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b7e6022189614a8b — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:594 
          baseURL: process.env.LANGFUSE_LLM_CONNECTION_AZURE_BASE_URL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b2a0104ed8cf4442 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:615 
        model: process.env.LANGFUSE_LLM_CONNECTION_AZURE_MODEL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #12485e149c806492 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:620 
        secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_AZURE_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cc998b8d411534af — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:621 
        baseURL: process.env.LANGFUSE_LLM_CONNECTION_AZURE_BASE_URL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #98b712c2366aa8ce — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:640 
          model: process.env.LANGFUSE_LLM_CONNECTION_AZURE_MODEL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6ca67959316d05c1 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:646 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_AZURE_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #780c192692338eb7 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:647 
          baseURL: process.env.LANGFUSE_LLM_CONNECTION_AZURE_BASE_URL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e5c3fb998bf0f797 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:661 
      if (!process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_ACCESS_KEY_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #31216d3eb3c29ca7 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:668 
      if (!process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_SECRET_ACCESS_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b497c7822e7285bd — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:675 
      if (!process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_REGION) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #423a95d47738f2f9 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:687 
        accessKeyId: process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_ACCESS_KEY_ID!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cc6ba542749724c4 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:689 
          process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_SECRET_ACCESS_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #27acac3ed5829214 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:695 
        region: process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_REGION!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7a228ba7a8e52bee — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:814 
      if (!process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_API_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #531b73321a8b4c1d — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:821 
      if (!process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_REGION) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d2952a031022810b — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:833 
        apiKey: process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_API_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5ce58d7cdb67c963 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:838 
      region: process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_REGION!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #22fbe40db53b2044 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:909 
      if (!process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5c21703a9cda4e5d — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:937 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5beef8a62d061351 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:968 
              process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d8ba3ed261298615 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1014 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #786b5ce9e2f3e337 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1041 
        secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6c67881470171335 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1067 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e3dc0c75d9d5e6db — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1098 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8f028bb53e22083a — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1132 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b756ed4115d66c5f — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1145 
      if (!process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #66c652c9bee52fe2 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1175 
              process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f934a3d5ad25cfbf — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1205 
              process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bed48053d6526d98 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1234 
          process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6e350a7b626f5500 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1263 
              process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #90a84754bf131311 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1298 
              process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cc4c367bca9ea910 — Environment-variable access.
repo/worker/src/__tests__/modelMatch.test.ts:24 
  process.env.LANGFUSE_LOCAL_CACHE_MODEL_MATCH_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5fb5d9b5b788ccca — Environment-variable access.
repo/worker/src/__tests__/modelMatch.test.ts:28 
    process.env.LANGFUSE_LOCAL_CACHE_MODEL_MATCH_ENABLED = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0c898cb2b2ad77e6 — Environment-variable access.
repo/worker/src/__tests__/modelMatch.test.ts:47 
      delete process.env.LANGFUSE_LOCAL_CACHE_MODEL_MATCH_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b84ffaf8e5a577fe — Environment-variable access.
repo/worker/src/__tests__/modelMatch.test.ts:49 
      process.env.LANGFUSE_LOCAL_CACHE_MODEL_MATCH_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #eee78ff138efd88e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/monitorWorkerIntegration.test.ts:287 
      http.post("https://webhook.example.com/*", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          body: JSON.stringify(await request.json()),
        });
        return HttpResponse.json({ success: true }, { status: 200 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #d93e6e8675a69b8f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/network.ts:37 
  return http.post("https://api.openai.com/v1/chat/completions", async () => {
    logger.info("openai handler");
    return response;
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #f6c8d135cff7a59e — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:6 
  process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5c333b34e1a21c92 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:326 
        process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cb1bcd4920937d58 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:327 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a543bd6f097fdca3 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:354 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #418a881750faf048 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:362 
        process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4d3a0c1330144120 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:363 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1fd6a4c3f12777e7 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:388 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #dc01eb3ac341c7ed — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:396 
        process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bbf8dfd842b23282 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:397 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5eee7a5e5ba8a831 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:420 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #afbe96377f2b562c — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:428 
        process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #91e62aac7cbc2f11 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:429 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #899ee5caa9707c4b — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:462 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7ba0b1f62072506d — Environment-variable access.
repo/worker/src/__tests__/usageThresholdCacheInvalidation.test.ts:15 
  process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #900bb4597539227a — Environment-variable access.
repo/worker/src/__tests__/usageThresholdCacheInvalidation.test.ts:19 
const SALT = process.env.SALT || "test-salt-for-hashing";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #8d1a06210779c1dd — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:206 
        http.post("https://redirector.example.com/step1", () => {
          step1Called = true;
          return new Response(null, {
            status: 302,
            headers: { Location: "https://final.example.com/webhook" },
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #feba21ea6e2d4b87 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:213 
        http.post("https://final.example.com/webhook", () => {
          step2Called = true;
          return HttpResponse.json({ success: true }, { status: 200 });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #5357e7d1cf945e4a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:244 
        http.post("https://redirector.example.com/step1", () => {
          callOrder.push("step1");
          return new Response(null, {
            status: 302,
            headers: { Location: "https://redirector.example.com/step2" },
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #f4fbfe4ae4be9baf — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:251 
        http.post("https://redirector.example.com/step2", () => {
          callOrder.push("step2");
          return new Response(null, {
            status: 302,
            headers: { Location: "https://redirector.example.com/step3" },
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #b6b27a577ad0189e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:258 
        http.post("https://redirector.example.com/step3", () => {
          callOrder.push("step3");
          return HttpResponse.json({ success: true }, { status: 200 });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #9bd7bce4c5a8f275 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:288 
        http.post("https://direct.example.com/webhook", () => {
          called = true;
          return HttpResponse.json({ success: true }, { status: 200 });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #e97d073048ecb04d — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:318 
        http.post("https://relative-redirect.example.com/start", () => {
          return new Response(null, {
            status: 302,
            headers: { Location: "/final" }, // Relative URL
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #1ca34f3f0cbad0b9 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:324 
        http.post("https://relative-redirect.example.com/final", () => {
          finalCalled = true;
          return HttpResponse.json({ success: true }, { status: 200 });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #4a4a9f0cec116b91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:359 
          http.post(
            `https://infinite-redirect.example.com/step${currentStep}`,
            () => {
              return new Response(null, {
                status: 302,
                headers: {
                  Location: `https://infinite-redirect.example.com/step${nextStep}`,
                },
              });
            },
          ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #922ab915a5cfc6d1 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:396 
        http.post("https://circular.example.com/a", () => {
          return new Response(null, {
            status: 302,
            headers: { Location: "https://circular.example.com/b" },
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #7826d6abd00ed44e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:402 
        http.post("https://circular.example.com/b", () => {
          return new Response(null, {
            status: 302,
            headers: { Location: "https://circular.example.com/a" },
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #9f368aae9794d57a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:431 
        http.post("https://broken-redirect.example.com/hook", () => {
          // Return 302 without Location header
          return new Response(null, { status: 302 });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #8054228c1bc152c2 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhooks.test.ts:48 
      http.post("https://webhook.example.com/*", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: JSON.stringify(await request.json()),
        });
        return HttpResponse.json({ success: true }, { status: 200 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #f5caf486495032e4 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhooks.test.ts:59 
      http.post("https://webhook-error.example.com/*", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: JSON.stringify(await request.json()),
        });
        return HttpResponse.json(
          { error: "Internal Server Error" },
          { status: 500 },
        );
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #d950ceea96e02257 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhooks.test.ts:73 
      http.post("https://webhook-201.example.com/*", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: JSON.stringify(await request.json()),
        });
        return HttpResponse.json({ success: true }, { status: 201 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #12c218502d746e3d — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhooks.test.ts:84 
      http.post("https://webhook-timeout.example.com/*", () => {
        return HttpResponse.error();
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #6b23bcf2af9dab28 — Environment-variable access.
repo/worker/src/env.ts:617 
  process.env.DOCKER_BUILD === "1" // eslint-disable-line turbo/no-undeclared-env-vars

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f20589917ba31f7f — Environment-variable access.
repo/worker/src/features/evaluation/codeBased/awsLambdaCodeEvalDispatcher.integration.test.ts:9 
const endpoint = process.env.LANGFUSE_CODE_EVAL_AWS_LAMBDA_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #09c77849369f2649 — Environment-variable access.
repo/worker/src/features/evaluation/codeBased/awsLambdaCodeEvalDispatcher.integration.test.ts:13 
process.env.AWS_ACCESS_KEY_ID ??= "test";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bd71d141c4600bb6 — Environment-variable access.
repo/worker/src/features/evaluation/codeBased/awsLambdaCodeEvalDispatcher.integration.test.ts:14 
process.env.AWS_SECRET_ACCESS_KEY ??= "test";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #682cc8e968ea13ff — Environment-variable access.
repo/worker/src/features/evaluation/codeBased/awsLambdaCodeEvalDispatcher.integration.test.ts:15 
process.env.AWS_REGION ??= "us-east-1";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #7d91f0cc0021e6a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/worker/src/features/mixpanel/mixpanelClient.ts:77 
      const response = await fetch(url, {
        method: "POST",
        headers: {
          "Content-Type": "application/json",
          "Content-Encoding": "gzip",
          Authorization: authHeader,
        },
        body: compressedBody as unknown as BodyInit,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #aa25d45de01ed38c — Filesystem access.
repo/worker/src/scripts/convertDefaultModelPricesToTiers.ts:32 
import * as fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9c268861c18e36fc — Filesystem access.
repo/worker/src/scripts/convertDefaultModelPricesToTiers.ts:133 
  const oldData = JSON.parse(fs.readFileSync(inputPath, "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3d17fb8b0bbaad77 — Filesystem access.
repo/worker/src/scripts/convertDefaultModelPricesToTiers.ts:149 
  fs.writeFileSync(outputPath, JSON.stringify(newModels, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #78953eadceac9d99 — Filesystem access.
repo/worker/src/scripts/createDefaultModelPricesJson.ts:68 
    await fs.writeFile(EXPORT_PATH, JSON.stringify(modelPrices, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #93b54e96d49ed1ac — Filesystem access.
repo/worker/src/scripts/refillQueueEvent/index.ts:3 
import * as fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cb2a91206a148a49 — Filesystem access.
repo/worker/src/scripts/refillQueueEvent/index.ts:67 
  const fileContent = fs.readFileSync(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2b00276fa589ab04 — Filesystem access.
repo/worker/src/scripts/replayIngestionEvents/s3-ingestion-event-replay.ts:13 
import * as fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cfa16f037b3a440d — Environment-variable access.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:56 
const LANGFUSE_HOST = process.env.LANGFUSE_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1393e2b942b14a75 — Environment-variable access.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:57 
const ADMIN_API_KEY = process.env.ADMIN_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #dbe81804e185ca25 — Filesystem access.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:79 
  const content = readFileSync(CHECKPOINT_FILE, "utf-8").trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7113df7f0f2071e2 — Filesystem access.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:85 
  writeFileSync(CHECKPOINT_FILE, String(offset), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #1aae9f1717ddf4c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:263 
    const resp = await fetch(API_URL, {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Authorization: `Bearer ${ADMIN_API_KEY}`,
      },
      body: JSON.stringify({ keys }),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low pii_flow test-only Excluded from app score #576b2fd911aa4a7b — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration. Non-production path — not application runtime.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:263 · flow /tmp/closeopen-_489jj4o/repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:57 → /tmp/closeopen-_489jj4o/repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:263 
    const resp = await fetch(API_URL, {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Authorization: `Bearer ${ADMIN_API_KEY}`,
      },
      body: JSON.stringify({ keys }),
    });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
low pii_flow test-only Excluded from app score #82db5d5eb1796ac5 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:282 · flow /tmp/closeopen-_489jj4o/repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:57 → /tmp/closeopen-_489jj4o/repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:282 
        console.warn(
          `  Retry ${attempt + 1}/${maxRetries} after ${resp.status} (waiting ${Math.round(delay)}ms)`,
        );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs test-only Excluded from app score #c5aaba58203f8fb7 — Filesystem access.
repo/worker/src/scripts/verifyClickhouseRecords/index.ts:254 
    await writeFile(outPath, failedObservationList.join("\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9450bd8c541562ce — Filesystem access.
repo/worker/src/scripts/verifyClickhouseRecords/index.ts:269 
    await writeFile(outPath, failedTraceList.join("\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f15accbf3512f6d8 — Filesystem access.
repo/worker/src/scripts/verifyClickhouseRecords/index.ts:282 
    await writeFile(outPath, failedScoreList.join("\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ffb44094b91578b — Environment-variable access.
repo/worker/src/utils/hostId.ts:14 
    process.env.ECS_CONTAINER_METADATA_URI_V4 ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e333fa8aa8fdffe — Environment-variable access.
repo/worker/src/utils/hostId.ts:15 
    process.env.ECS_CONTAINER_METADATA_URI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c016dd4227dea69 — Environment-variable access.
repo/worker/src/utils/hostId.ts:22 
  const envHost = process.env.HOSTNAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #32e0ccbd0e6c6819 — Environment-variable access.
repo/worker/vitest.config.ts:10 
    reporters: process.env.CI

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #85a5eaa8871952f4 — Environment-variable access.
repo/worker/vitest.config.ts:14 
    retry: process.env.CI ? 3 : 0,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #12ab0f2641299d0f — Environment-variable access.
repo/worker/vitest.config.ts:18 
    slowTestThreshold: process.env.CI ? 2_000 : 300,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm)

npm first-party
expand_more 19 low-confidence finding(s)
low env_fs test-only Excluded from app score #af0e4db4181c4b4c — Filesystem access.
repo/.agents/skills/add-model-price/scripts/test-match-pattern.mjs:67 
  const models = JSON.parse(await fs.readFile(defaultFile, "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #55a036f6e04436ec — Filesystem access.
repo/.agents/skills/add-model-price/scripts/validate-pricing-file.mjs:33 
const raw = await fs.readFile(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #8fd01e47e606053d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/.agents/skills/pnpm-upgrade-package/scripts/check-release-age-window.mjs:71 
    const response = await fetch(
      `https://registry.npmjs.org/${encodeURIComponent(name)}`,
      {
        headers: {
          accept: "application/json",
          "user-agent": "langfuse-pnpm-upgrade-package-skill",
        },
        signal: abortController.signal,
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #8409a9129f10daf3 — Filesystem access.
repo/.agents/skills/pnpm-upgrade-package/scripts/lib/workspace-utils.mjs:23 
  return JSON.parse(readFileSync(path, "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c73d3f41cf31d33d — Filesystem access.
repo/.agents/skills/pnpm-upgrade-package/scripts/lib/workspace-utils.mjs:68 
  const raw = readFileSync(path, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cb638ad02d6775cc — Filesystem access.
repo/scripts/agents/sync-agent-shims.mjs:17 
const config = JSON.parse(readFileSync(sourcePath, "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #410bb0acef809c33 — Filesystem access.
repo/scripts/agents/sync-agent-shims.mjs:244 
      const current = readFileSync(output.path, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #87e5d90496d37042 — Filesystem access.
repo/scripts/agents/sync-agent-shims.mjs:270 
    writeFileSync(output.path, output.content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2795b4240d0fc447 — Environment-variable access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:30 
  Authorization: process.env.GITHUB_TOKEN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a5756481ddbe90c7 — Environment-variable access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:31 
    ? `Bearer ${process.env.GITHUB_TOKEN}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #10a00704e3e67b3e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/scripts/in-app-agent/sync-raw-skills.mjs:37 
  const response = await fetch(url, {
    headers: getGitHubHeaders(),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #04899014c0da8eb8 — Environment-variable access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:44 
        !process.env.GITHUB_TOKEN &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #7f764f1aaee0d03e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/in-app-agent/sync-raw-skills.mjs:97 
  const response = await fetch(sourceApiUrl, {
    headers: getGitHubHeaders(),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #0a0ea5277acc8ea2 — Environment-variable access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:104 
        !process.env.GITHUB_TOKEN &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e167dbe8dfc31686 — Filesystem access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:212 
        if (readFileSync(localPath, "utf8") !== content) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #da1ae6b3a6f9481e — Filesystem access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:227 
        readFileSync(resolve(generatedDir, generatedModuleName), "utf8") !==

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b70f028fb34ae95b — Filesystem access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:263 
    writeFileSync(resolve(rawTargetDir, basename(name)), content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #51948af24ce66d50 — Filesystem access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:266 
  writeFileSync(
    resolve(generatedDir, generatedModuleName),
    generatedModuleContent,
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #54c17718315b0433 — Filesystem access.
repo/scripts/scan-client-bundle.mjs:242 
  const code = fs.readFileSync(file, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/in-app-agent-sandbox-runtime

npm first-party
expand_more 5 low-confidence finding(s)
low env_fs production #25d420989cf0717d — Filesystem access.
repo/packages/in-app-agent-sandbox-runtime/src/server.ts:90 
    await writeFile(filePath, file.content, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4297f55e379feb64 — Filesystem access.
repo/packages/in-app-agent-sandbox-runtime/src/server.ts:166 
    content = await readFile(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e791c3f389ee851 — Filesystem access.
repo/packages/in-app-agent-sandbox-runtime/src/server.ts:187 
  await writeFile(filePath, body.content, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d76a3e00601e59b — Filesystem access.
repo/packages/in-app-agent-sandbox-runtime/src/server.ts:206 
    current = await readFile(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9484c8baafe95068 — Filesystem access.
repo/packages/in-app-agent-sandbox-runtime/src/server.ts:223 
    await writeFile(
      filePath,
      current.replace(body.oldText, body.newText),
      "utf8",
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/shared

npm first-party
expand_more 44 low-confidence finding(s)
low env_fs test-only Excluded from app score #ccdd4b911cb21ed0 — Environment-variable access.
repo/packages/shared/scripts/seeder/cli-main.ts:62 
const baseUrl = (process.env.NEXTAUTH_URL ?? "http://localhost:3000").replace(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2d284f57b98e4873 — Environment-variable access.
repo/packages/shared/scripts/seeder/cli.ts:26 
  (name) => process.env[name] === undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #67ed0b7b6d6eb134 — Environment-variable access.
repo/packages/shared/scripts/seeder/cli.ts:43 
    process.env.LANGFUSE_LOG_LEVEL = "error";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #387bce71f2d16361 — Environment-variable access.
repo/packages/shared/scripts/seeder/doctor.ts:52 
  ].filter((name) => process.env[name] === undefined);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #dda6fc9dfd50e2e1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/packages/shared/scripts/seeder/doctor.ts:297 
    const response = await fetch(url, { signal: AbortSignal.timeout(3000) });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #3a458a61e01b4ce0 — Environment-variable access.
repo/packages/shared/scripts/seeder/doctor.ts:315 
  const endpoint = process.env.LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #939f815940d36fde — Filesystem access.
repo/packages/shared/scripts/seeder/scenarios/many-traces.ts:1 
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #77e28d22be39b253 — Filesystem access.
repo/packages/shared/scripts/seeder/scenarios/many-traces.ts:25 
    readFileSync(path.join(utilsDir, "nested_json.json"), "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #00bf0bca6c96a24f — Filesystem access.
repo/packages/shared/scripts/seeder/scenarios/many-traces.ts:28 
    readFileSync(path.join(utilsDir, "chat_ml_json.json"), "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #39472a7516d73b5f — Filesystem access.
repo/packages/shared/scripts/seeder/scenarios/many-traces.ts:31 
    heavyMarkdown: readFileSync(path.join(utilsDir, "markdown.txt"), "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c8aeb0c958128e76 — Filesystem access.
repo/packages/shared/scripts/seeder/seed-media.ts:11 
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a6555674147758e2 — Filesystem access.
repo/packages/shared/scripts/seeder/seed-media.ts:89 
  const fileBytes = fs.readFileSync(mediaFile.filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0d09126212009719 — Filesystem access.
repo/packages/shared/scripts/seeder/seed-media.ts:161 
  const fileBytes = fs.readFileSync(mediaFile.filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a90e6edd3d46c6f3 — Filesystem access.
repo/packages/shared/scripts/seeder/seed-postgres.ts:59 
  inAppAgentSystemPrompt = readFileSync(
    IN_APP_AGENT_SYSTEM_PROMPT_PATH,
    "utf-8",
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7796b3683e418aff — Environment-variable access.
repo/packages/shared/scripts/seeder/seed-postgres.ts:219 
    secret: process.env.SEED_SECRET_KEY ?? "sk-lf-1234567890", // eslint-disable-line turbo/no-undeclared-env-vars

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0f4fac138e9dd03e — Environment-variable access.
repo/packages/shared/scripts/seeder/seed-postgres.ts:283 
      secret: process.env.SEED_SECRET_KEY ?? "sk-lf-asdfghjkl", // eslint-disable-line turbo/no-undeclared-env-vars

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1f9dfa2695d88255 — Environment-variable access.
repo/packages/shared/scripts/seeder/seed-postgres.ts:316 
    const OPENAI_API_KEY = process.env.OPENAI_API_KEY; // eslint-disable-line turbo/no-undeclared-env-vars

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #702026429f63c4f5 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/framework-trace-loader.ts:1 
import { readFileSync, readdirSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b42df1a286b22810 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/framework-trace-loader.ts:45 
      const content = readFileSync(filePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #47c99fb4f231bbc6 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/merge-observations.ts:1 
import { readFileSync, writeFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1bb33f30f7033e06 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/merge-observations.ts:23 
const baseData = JSON.parse(readFileSync(baseFile, "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ea7017be2e9b4d7a — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/merge-observations.ts:24 
const detailedObs = JSON.parse(readFileSync(detailedFile, "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e27689428b9b0281 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/merge-observations.ts:64 
writeFileSync(outputFile, JSON.stringify(output, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c0a6158b91930024 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/seeder-orchestrator.ts:25 
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1faed9289a235c8f — Filesystem access.
repo/packages/shared/scripts/seeder/utils/seeder-orchestrator.ts:61 
        readFileSync(nestedJsonPath, "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8ab63752b159f16d — Filesystem access.
repo/packages/shared/scripts/seeder/utils/seeder-orchestrator.ts:63 
      const heavyMarkdownContent = readFileSync(heavyMarkdownPath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bf70cfc91458c0aa — Filesystem access.
repo/packages/shared/scripts/seeder/utils/seeder-orchestrator.ts:65 
        readFileSync(chatMlJsonPath, "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c9d77ac7547f069 — Environment-variable access.
repo/packages/shared/src/db.ts:34 
  if (env.NODE_ENV === "development") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42a385cf9f01b7db — Environment-variable access.
repo/packages/shared/src/db.ts:55 
if (process.env.NODE_ENV === "development") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ace0d08c71b9621 — Environment-variable access.
repo/packages/shared/src/env.ts:540 
  process.env.DOCKER_BUILD === "1" // eslint-disable-line turbo/no-undeclared-env-vars

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d30d3dc2ee3570c — Environment-variable access.
repo/packages/shared/src/features/analytics-integrations/export-source-policy.ts:49 
const _override = process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORT_CUTOFF

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9674878740218844 — Environment-variable access.
repo/packages/shared/src/features/analytics-integrations/export-source-policy.ts:50 
  ? new Date(process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORT_CUTOFF)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e00d70ad03fbd23f — Environment-variable access.
repo/packages/shared/src/features/analytics-integrations/export-source-policy.ts:57 
const _exporterOverride = process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORTER_CUTOFF

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d91e87a59902eb08 — Environment-variable access.
repo/packages/shared/src/features/analytics-integrations/export-source-policy.ts:58 
  ? new Date(process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORTER_CUTOFF)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #162161e1bb23066c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/packages/shared/src/server/auth/gitHubEnterpriseProvider.ts:33 
          const res = await fetch(`${apiBaseUrl}/user/emails`, {
            headers: { Authorization: `token ${tokens.access_token}` },
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #132a46b035bd8874 — Environment-variable access.
repo/packages/shared/src/server/clickhouse/client.ts:120 
      (key) => process.env[key] === "true",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1b30cc4a684f6eb5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/packages/shared/src/server/ee/ingestionMasking/applyIngestionMasking.ts:84 
    const response = await fetch(config.callbackUrl, {
      method: "POST",
      headers,
      body: JSON.stringify(data),
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #7a962b6f4cf80bba — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/shared/src/server/llm/llmText.test.ts:223 
                data: new URL(
                  "http://dns-rebind.attacker.example/metadata?token=secret",
                ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #0c3f7b42fa4dbaee — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/shared/src/server/llm/llmText.test.ts:266 
                data: new URL("https://cdn.example.com/image.png"),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #eab7a242e8977a08 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/packages/shared/src/server/outbound-url/fetch.ts:154 
    const response = await fetch(currentUrl, fetchOptions);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #694e0fe774a29731 — Filesystem access.
repo/packages/shared/src/server/redis/redis.ts:3 
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bf00d3d58849653 — Filesystem access.
repo/packages/shared/src/server/redis/redis.ts:82 
        ? fs.readFileSync(env.REDIS_TLS_CA_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd8ee19243c31285 — Filesystem access.
repo/packages/shared/src/server/redis/redis.ts:85 
        ? fs.readFileSync(env.REDIS_TLS_CERT_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b456e889d753541b — Filesystem access.
repo/packages/shared/src/server/redis/redis.ts:88 
        ? fs.readFileSync(env.REDIS_TLS_KEY_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

@ai-sdk/amazon-bedrock

npm dependency
high pii_flow dependency Excluded from app score #93803bd746b21f59 — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:87 · flow /tmp/closeopen-_489jj4o/pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:76 → /tmp/closeopen-_489jj4o/pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:87 
    return fetch(input, {
      ...init,
      body,
      headers: combinedHeaders as HeadersInit,
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 3 low-confidence finding(s)
low egress dependency Excluded from app score #5329c32818268bbb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:54 
      return fetch(input, {
        ...init,
        headers: headersWithUserAgent as HeadersInit,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #008d05b4269164f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:87 
    return fetch(input, {
      ...init,
      body,
      headers: combinedHeaders as HeadersInit,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bf8962b2924061d9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:133 
    return fetch(input, {
      ...init,
      headers: finalHeaders as HeadersInit,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

dd-trace

npm dependency
medium telemetry dependency Excluded from app score #a54170073c201978 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/operations-taint-object.js:3 
const TaintedUtils = require('@datadog/native-iast-taint-tracking')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #d3321363b234e695 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/operations.js:4 
const TaintedUtils = require('@datadog/native-iast-taint-tracking')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #67e905cc610661ef — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/rewriter.js:57 
      const iastRewriter = require('@datadog/wasm-js-rewriter')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #95c70d823456ed49 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/rewriter.js:82 
    getPrepareStackTrace = require('@datadog/wasm-js-rewriter/js/stack-trace').getPrepareStackTrace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #87e1dec7c61e5be5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/rewriter.js:233 
    cacheRewrittenSourceMap = require('@datadog/wasm-js-rewriter/js/source-map').cacheRewrittenSourceMap

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #84eb156910a37d33 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/taint-tracking-impl.js:4 
const TaintedUtils = require('@datadog/native-iast-taint-tracking')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #0ce2d574144ed36a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/waf/waf_manager.js:36 
      const { DDWAF } = require('@datadog/native-appsec')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #2d05f92e4359e17d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/telemetry.js:69 
  ciVisibilityMetrics.distribution(name, formatMetricTags(tags)).track(measure)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #1209a08c29497f50 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/config/stable.js:27 
      libdatadog = require('@datadog/libdatadog')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #46a84ddc65af2d48 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/crashtracking/crashtracker.js:6 
const libdatadog = require('@datadog/libdatadog')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #f3789ccb7cefd4ed — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/llmobs/telemetry.js:92 
  llmobsMetrics.distribution('init_time', tags).track(initTimeMs)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #84177f32a82d579b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/llmobs/telemetry.js:97 
  llmobsMetrics.distribution('span.raw_size', tags).track(rawEventSize)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #b489a635ab2c476f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/llmobs/telemetry.js:103 
  llmobsMetrics.distribution('span.size', tags).track(eventSize)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #6efd3de38c0546e1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporter_cli.js:5 
const { SourceMapper, heap, encode } = require('@datadog/pprof')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #f674498320ab5465 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporters/agent.js:46 
      durationDistribution.track(perf.now() - start)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #46dc3f083b622402 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporters/agent.js:63 
      sizeDistribution.track(form.size())

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a9413f25127eeeb5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/profiler.js:150 
              const zstdCompress = require('@datadog/libdatadog').load('datadog-js-zstd').zstd_compress

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #75bf173515856e9b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/profiler.js:176 
    const { setLogger, SourceMapper } = require('@datadog/pprof')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #1afc0f4ff0ceec3a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/profilers/shared.js:16 
  const pprof = require('@datadog/pprof')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a6fdd9b6a28a38e6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/profilers/space.js:35 
    this.#pprof = require('@datadog/pprof')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a36557f52e0c745d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/profilers/wall.js:167 
    this.#pprof = require('@datadog/pprof')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #4bed66c688084d50 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/runtime_metrics/runtime_metrics.js:57 
        nativeMetrics = require('@datadog/native-metrics')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #49f40c0bdcac3cb8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/runtime_metrics/runtime_metrics.js:119 
      const handle = nativeMetrics.track(span)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #48e5db3b01e7070e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/telemetry/metrics.js:78 
    return this.track(value)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #99b861a8d5273da1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/telemetry/metrics.js:82 
    return this.track(-value)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a738ef922e6c8a33 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/telemetry/metrics.js:120 
    return this.track(value)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #2e0ce141157d4a6b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/tracer_metadata.js:8 
    const libdatadog = require('@datadog/libdatadog')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 91 low-confidence finding(s)
low env_fs dependency Excluded from app score #53efbfd0720505d4 — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-esbuild/index.js:61 
const DD_IAST_ENABLED = process.env.DD_IAST_ENABLED?.toLowerCase() === 'true' || process.env.DD_IAST_ENABLED === '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cd0c86c7b498520 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/index.js:261 
        const packageJson = JSON.parse(fs.readFileSync(/** @type {string} */(pathToPackageJson)).toString())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acf243e9fc873fe8 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/index.js:346 
          contents = fs.readFileSync(args.path, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8be579f3901a66c — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/index.js:349 
        const fileCode = fs.readFileSync(args.path, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54df72474ff4787c — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/index.js:388 
      const fileCode = fs.readFileSync(args.path, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f49eee8e88797ed — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-esbuild/src/log.js:6 
const DD_TRACE_DEBUG = (process.env.DD_TRACE_DEBUG || '').trim().toLowerCase()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #037d42edcac2b759 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/src/utils.js:76 
    source: fs.readFileSync(fileURLToPath(url), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5669687f787b87ae — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/src/utils.js:204 
      const packageJsonContent = fs.readFileSync(packageJsonPath).toString()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f18b2ba16ac47519 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c566fa8dc5867855 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:78 
    const content = fs.readFileSync(originalSupportFile, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08dbb8a6c6e00be5 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:98 
    fs.writeFileSync(wrapperFile, wrapperContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #864acebb3b35c172 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:245 
      const pkg = JSON.parse(fs.readFileSync(candidate, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a5687cbc2c502f8 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:309 
  fs.writeFileSync(wrapperFile, body)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c4e19f5cca38620 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:321 
    const { version } = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2df72e8d86704f28 — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:340 
  const previousCompilerOptions = process.env.TS_NODE_COMPILER_OPTIONS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #893b1074a5280079 — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:350 
  process.env.TS_NODE_COMPILER_OPTIONS = JSON.stringify({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97c1accadc3c3ea3 — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:357 
      delete process.env.TS_NODE_COMPILER_OPTIONS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6dd7f71ee429e18d — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:359 
      process.env.TS_NODE_COMPILER_OPTIONS = previousCompilerOptions

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4c767f7eac17eba — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/helpers/rewriter/index.js:3 
const { readFileSync } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02a72030ecd92a6f — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/helpers/rewriter/index.js:86 
      const pkg = JSON.parse(readFileSync(
        join(basename, 'package.json'), 'utf8'
      ))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b90bf35ad6cef0f5 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/jest.js:2344 
    const source = readFileSync(suiteFilePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a6ef334343cb1f6 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/jest/coverage-backfill.js:110 
    sourceText = readFileSync(absoluteFile, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7772221eb1b8abf6 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-cypress/src/source-map-utils.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77a8cc8b2acbb066 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-cypress/src/source-map-utils.js:92 
    return JSON.parse(fs.readFileSync(absoluteFilePath + '.map', 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e852468fbd087e09 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-cypress/src/source-map-utils.js:95 
    const content = fs.readFileSync(absoluteFilePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d6d8776fc1fa7cd — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-cypress/src/source-map-utils.js:325 
    content = fs.readFileSync(absoluteFilePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77156c90a36760c9 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-jest/src/util.js:3 
const { readFileSync } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97f7f341a03c5f6f — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-jest/src/util.js:76 
    testSource = readFileSync(test.path, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f70fa6aaff9b6d0e — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-nyc/src/index.js:59 
      const content = readFileSync(settingsCachePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b12e72c6303e4f6a — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-webpack/index.js:155 
          packageJson = JSON.parse(fs.readFileSync(pkgJson).toString())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5a969293eb480c1 — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-webpack/src/log.js:6 
const DD_TRACE_DEBUG = (process.env.DD_TRACE_DEBUG || '').trim().toLowerCase()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #c0642914d3cbd50c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/packages/dd-trace/src/aiguard/client.js:11 
  const response = await fetch(opts.url, {
    method: 'POST',
    headers,
    body: postData,
    signal: AbortSignal.timeout(opts.timeout),
  })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #6a93f62e58b07839 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/rule_manager.js:31 
    ? JSON.parse(readFileSync(config.rules, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d13f5d1f17d4e1d5 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/exporters/git/git_metadata.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcd1817a8591751a — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/exporters/git/git_metadata.js:146 
    const packFileContent = fs.readFileSync(packFileToUpload)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63cf845a42c13a3b — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/fs-cache.js:62 
    const raw = fs.readFileSync(cachePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b59ea7c78793998a — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/fs-cache.js:91 
    fs.writeFileSync(tmpPath, JSON.stringify({ timestamp: Date.now(), data }), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6dbbc2491dfd31a4 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/fs-cache.js:136 
    fs.writeFileSync(tmpPath, String(Date.now()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4f65929cfb50785 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/fs-cache.js:167 
    const content = fs.readFileSync(getLockPath(cacheKey), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #deb8cbbea6a25d6c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/request.js:81 
      const req = client.request(opts, (res) => {
        // Capture non-2xx status code as soon as we see it so telemetry preserves it if the retry
        // fails with a network error (no HTTP response) before 'end' fires
        if (res.statusCode >= 400 && firstStatusCode === null) {
          firstStatusCode = res.statusCode
        }

        const chunks = []

        res.setTimeout(timeout)

        res.on('data', chunk => {
          chunks.push(chunk)
        })

        res.once('end', () => {
          const buffer = Buffer.concat(chunks)

          if (res.statusCode >= 200 && res.statusCode <= 299) {
            const isGzip = res.headers['content-encoding'] === 'gzip'
            if (isGzip) {
              zlib.gunzip(buffer, (err, result) => {
                if (err) {
                  log.error('Could not gunzip response: %s', err.message)
                  callback(null, '', res.statusCode)
                } else {
                  callback(null, result.toString(), res.statusCode)
                }
              })
            } else {
              callback(null, buffer.toString(), res.statusCode)
            }
            return
          }

          if (res.statusCode === 429 && !hasRetried) {
            const resetHeader = res.headers['x-ratelimit-reset']
            const resetTs = (resetHeader === null || resetHeader === undefined)
              ? Number.NaN
              : Number.parseInt(resetHeader, 10)
            const waitMs = Number.isFinite(resetTs) ? Math.max(0, resetTs * 1000 - Date.now()) : Number.NaN

            if (Number.isFinite(waitMs) && waitMs <= RATE_LIMIT_MAX_WAIT_MS) {
              hasRetried = true
              setTimeout(makeRequest, waitMs)
              return
            }

            if (!Number.isFinite(waitMs) || waitMs > RATE_LIMIT_MAX_WAIT_MS) {
              log.debug('Rate limited (429): drop payload (wait %sms > %sms or invalid header)',
                Number.isFinite(waitMs) ? waitMs : 'N/A', RATE_LIMIT_MAX_WAIT_MS)
            }
          } else if (res.statusCode >= 500 && !hasRetried) {
            try {
              if (req.socket) req.socket.destroy()
            } catch {
              // ignore
            }
            hasRetried = true
            setTimeout(makeRequest, singleJitteredDelay())
            return
          }

          const error = buildError(res, buffer, opts)
          // Use original status code if this is a failed retry
          callback(error, null, firstStatusCode === null ? res.statusCode : firstStatusCode)
        })
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #28af8427b4de41f7 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/upload-coverage-report.js:45 
    const coverageContent = readFileSync(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86c583047d88e36a — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/test-optimization-cache.js:36 
  process.env.DD_EXPERIMENTAL_TEST_OPT_SETTINGS_CACHE = cacheFilePath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb72964c6c155728 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/test-optimization-cache.js:52 
    return JSON.parse(readFileSync(settingsCachePath, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d04e361d4c90464 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/test-optimization-cache.js:70 
    writeFileSync(settingsCachePath, JSON.stringify(cache), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35534b71800e8d31 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/git_properties.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47ff8eb686d8b87c — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/git_properties.js:86 
    const gitHeadContent = fs.readFileSync(gitHeadPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3270f1120493f2ef — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/git_properties.js:104 
    const gitHeadRefContent = fs.readFileSync(gitHeadRefPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47f35262b7f920e3 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/parsers.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #474207fa5fad808f — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/parsers.js:120 
      return fs.readFileSync(raw, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c35a3fa7246b05b6 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/stable.js:4 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db1de12b8d8ff31e — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/stable.js:60 
      return fs.readFileSync(path, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b2b6a79376bdab5 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/debugger/devtools_client/source-maps.js:4 
const { readFileSync } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cfc0ae6914feebb — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/debugger/devtools_client/source-maps.js:17 
    return cacheIt(path, JSON.parse(await readFile(path, 'utf8')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2e4e31e5766866f — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/debugger/devtools_client/source-maps.js:24 
    return cacheIt(path, JSON.parse(readFileSync(path, 'utf8')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be24ad8b84cf6d2b — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/debugger/index.js:3 
const { readFile } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fffc94d6bfaaafef — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/debugger/index.js:245 
  readFile(path, 'utf8', (err, data) => {
    if (err) {
      log.error('[debugger] Failed to read probe file: %s', path, err)
      return
    }
    try {
      const parsedData = JSON.parse(data)
      log.debug('[debugger] Successfully parsed probe file: %s', path)
      cb(parsedData)
    } catch (err) {
      log.error('[debugger] Probe file (%s) is not valid JSON', path, err)
    }
  })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32d37b0b40cc187c — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/exporter.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0638530c352861a7 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/exporters/common/docker.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #629ebfe0d3e01d80 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/exporters/common/docker.js:22 
  cgroup = fs.readFileSync('/proc/self/cgroup', 'utf8').trim()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #ac94f5528f720b5a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/packages/dd-trace/src/exporters/common/request.js:200 
      const req = client.request(options, (res) => onResponse(res, finalize))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ec3a003b4ba66c76 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/packages/dd-trace/src/external-logger/src/index.js:111 
    const req = https.request(options, (res) => {
      tracerLogger.info(`statusCode: ${res.statusCode}`)
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #322369b3e34136db — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/git_metadata.js:38 
      const fromProperties = getGitMetadataFromGitProperties(fs.readFileSync(gitPropertiesFile, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51e400f8875fc51a — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/git_metadata.js:54 
      repositoryUrl = getRemoteOriginURL(fs.readFileSync(gitConfigPath, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d307c0e9421a90cc — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/index.js:16 
  var forced = isTrue(process.env.DD_INJECT_FORCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49ed4d623934594f — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/index.js:23 
  if (process.env.DD_INJECTION_ENABLED) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00ddbc5992bf1b31 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/log.js:7 
var DD_TRACE_DEBUG = process.env.DD_TRACE_DEBUG

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60d4ac116ffe9325 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/log.js:8 
var DD_TRACE_LOG_LEVEL = process.env.DD_TRACE_LOG_LEVEL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39a29f06afd821b2 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/telemetry.js:3 
var fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f7965359f93eb30 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/telemetry.js:10 
if (!process.env.DD_INJECTION_ENABLED) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10ed41cc00f97424 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/telemetry.js:14 
var telemetryForwarderPath = process.env.DD_TELEMETRY_FORWARDER_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1526d982be7848c8 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/telemetry.js:55 
  if (['1', 'true', 'True'].indexOf(process.env.DD_INJECT_FORCE) !== -1) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0575efe039ddc90 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/log/index.js:88 
      (process.env.OTEL_LOG_LEVEL === 'debug' || config.enabled)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #05e791ef78e58ad9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/packages/dd-trace/src/opentelemetry/otlp/otlp_http_exporter_base.js:84 
    const req = http.request(options, (res) => {
      let data = ''

      res.on('data', (chunk) => {
        data += chunk
      })

      res.once('end', () => {
        // @ts-expect-error - res.statusCode can be undefined
        if (res.statusCode >= 200 && res.statusCode < 300) {
          resultCallback({ code: 0 })
        } else {
          const error = new Error(`HTTP ${res.statusCode}: ${data}`)
          resultCallback({ code: 1, error })
        }
      })
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #8fabeb179a6cf034 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/pkg.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bdfa50304a4b2026 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/pkg.js:26 
    return JSON.parse(fs.readFileSync(filePath, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65e742f4af24bec8 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/ci.js:3 
const { readFileSync, readdirSync, existsSync } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad076d3490ce7a6c — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/ci.js:104 
  return JSON.parse(readFileSync(path, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9501f5082e37fd0a — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/ci.js:266 
    const content = readFileSync(filePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b89155d3c1edaf72 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/git-cache.js:5 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2be9bb912c82a928 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/git-cache.js:64 
    return fs.readFileSync(cacheFilePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78cb55f8bb32f480 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/git-cache.js:75 
    fs.writeFileSync(cacheFilePath, result, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbd7ac1e10db284c — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/git.js:5 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c66fc2bbc14a9cbc — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/test.js:4 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92b8ee7f71e798e9 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/test.js:764 
      return fs.readFileSync(path.join(rootDir, location)).toString()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26421a765119e128 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporter_cli.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #221f681caeea47b0 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporter_cli.js:69 
const profile = JSON.parse(fs.readFileSync(process.argv[5], 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9719c522ac9fa42a — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporters/file.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07caf55963ebb817 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/require-package-json.js:4 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db7e9e8bfd350151 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/require-package-json.js:20 
    return JSON.parse(fs.readFileSync(candidate, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f653c10afc2124f — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/require-package-json.js:28 
        return JSON.parse(fs.readFileSync(candidate, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81d452dcff4c04ab — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ritm.js:4 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@ag-ui/client

npm dependency
expand_more 6 low-confidence finding(s)
low egress dependency Excluded from app score #2a499d2c2dcc1c91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/agent/http.ts:61 
    this.fetch = config.fetch ?? ((url, requestInit) => fetch(url, requestInit));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #21d91336f3ecd721 — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/agent/subscriber.ts:286 
    hasProcess && (process.env.NODE_ENV === "test" || Boolean(process.env.VITEST_WORKER_ID));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd2fface9c424a9d — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/agent/subscriber.ts:289 
    (process.env.NODE_ENV === "development" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9c5348d688d6fe7 — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/agent/subscriber.ts:290 
      process.env.NODE_ENV === "test" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a3ef634e5fc70c3 — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/agent/subscriber.ts:291 
      Boolean(process.env.VITEST_WORKER_ID));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc7049e7405c579d — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/middleware/backward-compatibility-0-0-45.ts:39 
      process.env.SUPPRESS_TRANSFORMATION_WARNINGS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@astral-sh/ruff-wasm-web

npm dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #fac6c25832e07ee5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/ruff_wasm.js:794 
        module_or_path = fetch(module_or_path);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@aws-sdk/credential-providers

npm dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #860ab76c0716df13 — Environment-variable access.
pkgs/npm/@[email protected]/dist-cjs/index.js:246 
    return fromTemporaryCredentials$1(options, fromNodeProviderChain, async ({ profile = process.env.AWS_PROFILE }) => loadConfig({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f98ec2bf3fc80f81 — Environment-variable access.
pkgs/npm/@[email protected]/dist-es/fromTemporaryCredentials.js:5 
    return fromTemporaryCredentialsBase(options, fromNodeProviderChain, async ({ profile = process.env.AWS_PROFILE }) => loadConfig({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@ferrucc-io/emoji-picker

npm dependency
expand_more 27 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #b3b621fba7d72961 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/demo/scripts/prerender.ts:23 
const template = readFileSync(join(distDir, "index.html"), "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #f0a06d88d09591d6 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/demo/scripts/prerender.ts:94 
  writeFileSync(outFile, html, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #565b4f1c07b64bc2 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/demo/scripts/updateNpmStats.ts:3 
import { writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #b35485321dcdf772 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/demo/scripts/updateNpmStats.ts:9 
    const response = await fetch(
      "https://api.npmjs.org/downloads/point/last-month/@ferrucc-io/emoji-picker",
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #23bb849516f7aaa2 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/demo/scripts/updateNpmStats.ts:17 
    writeFileSync(
      join(__dirname, "../src/constants/npmStats.ts"),
      statsContent,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9f670a59f34307a5 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/e2e/playwright.config.ts:23 
    reuseExistingServer: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d115cae133441639 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:2 
import { readFileSync, writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #65e7cea975dfb56c — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:13 
      const content = readFileSync(testColorFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #fd5ead780da6d077 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:14 
      writeFileSync(backupFilePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1e68bc2c2f408f16 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:23 
      const content = readFileSync(backupFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #dc89196ae340fad0 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:24 
      writeFileSync(testColorFilePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #8f390e26a94936a2 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:80 
    writeFileSync(testColorFilePath, fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #812862ffbc6f92a7 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:83 
    const content = readFileSync(testColorFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #dca5449a2f8c7a4c — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/generateEmojiColors.ts:4 
import { writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0e22d430cadfb3c4 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/generateEmojiColors.ts:88 
  writeFileSync(outputPath, fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #27723e3a850106f7 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/generateEmojiColors.ts:140 
      writeFileSync(outputPath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d42b3595119128e0 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/release.ts:1 
import { readFileSync, writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e42be04e143757ab — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/release.ts:24 
  const pkg = JSON.parse(readFileSync('./package.json', 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5eded83f0b7f2563 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/release.ts:30 
  writeFileSync('./package.json', JSON.stringify(pkg, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1aeda200d52887d6 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/test-react-versions.ts:4 
import { existsSync, mkdirSync, writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #a4923c0ddc5e4aa9 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/test-react-versions.ts:56 
  writeFileSync(resolve(testDir, 'package.json'), JSON.stringify(packageJson, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #4759c0cc2d704aeb — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/test-react-versions.ts:101 
  writeFileSync(resolve(testDir, 'emojiPicker.test.tsx'), testFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10d69da068ea9d1e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/src/utils/emojiSupport.ts:116 
  if (typeof process !== 'undefined' && process.env.NODE_ENV === 'test') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c78bd83dbdedaff6 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/src/utils/loadJsonData.ts:31 
    return JSON.parse(fs.readFileSync(filePath, 'utf8')) as T;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b25935e80f13139e — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/release.ts:1 
import { readFileSync, writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #434fa9ceaa0409d6 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/release.ts:24 
  const pkg = JSON.parse(readFileSync('./package.json', 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5bb564ee377bd2bf — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/release.ts:30 
  writeFileSync('./package.json', JSON.stringify(pkg, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@hookform/resolvers

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #0e3fa8a39844dc33 — Environment-variable access.
pkgs/npm/@[email protected]/yup/src/yup.ts:97 
      if (schemaOptions?.context && process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@mastra/mcp

npm dependency
expand_more 10 low-confidence finding(s)
low env_fs dependency Excluded from app score #b30971f2953021ad — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:136 
  if (process.env.NODE_OPTIONS?.includes('dd-trace')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #0e201165d8e1f06d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:638 
    return await this.client.request({ method: 'resources/list' }, ListResourcesResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d51e2c3ea0e321ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:645 
    return await this.client.request({ method: 'resources/read', params: { uri } }, ReadResourceResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #17c112cb00392620 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:652 
    return await this.client.request({ method: 'resources/subscribe', params: { uri } }, EmptyResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #690d5e1390fe3649 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:659 
    return await this.client.request({ method: 'resources/unsubscribe', params: { uri } }, EmptyResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5be68e3fab712d96 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:666 
    return await this.client.request({ method: 'resources/templates/list' }, ListResourceTemplatesResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5a1fea27a813c805 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:676 
    return await this.client.request({ method: 'prompts/list' }, ListPromptsResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f65dcd6c7efa8b4a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:688 
    return await this.client.request(
      { method: 'prompts/get', params: { name, arguments: args } },
      GetPromptResultSchema,
      { timeout: this.timeout },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #84dbebdb05794133 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/server/oauth-middleware.ts:314 
      const response = await fetch(introspectionEndpoint, {
        method: 'POST',
        headers,
        body: new URLSearchParams({
          token,
          token_type_hint: 'access_token',
        }),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #5cbbdd3eef782094 — Filesystem access.
pkgs/npm/@[email protected]__sourcemap/src/server/server.ts:472 
        html = readFileSync(appResource.htmlPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@modelcontextprotocol/sdk

npm dependency
expand_more 38 low-confidence finding(s)
low egress tooling Excluded from app score unknown #b0eeec996cd35c22 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/scripts/cli.ts:54 
    await client.request({ method: 'resources/list' }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #b7bdd2f7e2dae3d0 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:16 
    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #cfba3afe029ed025 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:32 
    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #3912ca071b225680 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:77 
        writeFileSync(outputPath, fullContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a51fe31780773d17 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/client/stdio.ts:71 
        const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #3ecf403949050cbd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/elicitationUrlExample.ts:632 
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #8109bf7f2065d9f7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/elicitationUrlExample.ts:663 
        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #29fc25d5a66ea741 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/multipleClientsParallel.ts:64 
        const result = await client.request(toolRequest, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #36517f6530b5a2ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:95 
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #cea3e78c24760790 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:167 
            return client
                .request(request, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #fde902d9118b077a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:26 
const DEFAULT_SERVER_URL = process.env.MCP_SERVER_URL || 'http://localhost:3000/mcp';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d7428905806812e3 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:29 
    const clientId = process.env.MCP_CLIENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5ae0d10cf5ebaa3c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:36 
    const privateKeyPem = process.env.MCP_CLIENT_PRIVATE_KEY_PEM;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #fd1b4448691ff642 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:38 
        const algorithm = process.env.MCP_CLIENT_ALGORITHM || 'RS256';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ae32612f96cf7974 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:48 
    const clientSecret = process.env.MCP_CLIENT_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #560c26dc9be7c296 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:232 
            const result = await this.client.request(request, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #316bb01b59bf161d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:290 
            const result = await this.client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #d4acc3c7863dfe0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:510 
                const resourcesResult = await client.request(
                    {
                        method: 'resources/list',
                        params: {}
                    },
                    ListResourcesResultSchema
                );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #4bd3b834d5eff3b0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:601 
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #03d3f2eb2eca4630 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:632 
        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #b0c155b7eaa5628b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:719 
        const result = await client.request(request, CallToolResultSchema, {
            resumptionToken: notificationsToolLastEventId,
            onresumptiontoken: onLastEventIdUpdate
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #b61a528d2a619088 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:748 
        const promptsResult = await client.request(promptsRequest, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #59530a164ea77aaa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:777 
        const promptResult = await client.request(promptRequest, GetPromptResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #ffbba3442e03408e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:798 
        const resourcesResult = await client.request(resourcesRequest, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #7e4e4ef0d66cc730 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:826 
        const result = await client.request(request, ReadResourceResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #74730ca2305ba862 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/ssePollingClient.ts:75 
        const result = await client.request(
            {
                method: 'tools/call',
                params: {
                    name: 'long-task',
                    arguments: {}
                }
            },
            CallToolResultSchema,
            {
                // Track resumption tokens for debugging
                onresumptiontoken: token => {
                    lastEventId = token;
                    console.log(`[Event ID] ${token}`);
                }
            }
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #091852414b6db74e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:139 
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #2f03c10a9d802b8c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:172 
        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #2af36aab75f37666 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationFormExample.ts:350 
    const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #56c8ee25958f79bd — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:215 
const MCP_PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #945403ae4eb3c21e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:216 
const AUTH_PORT = process.env.MCP_AUTH_PORT ? parseInt(process.env.MCP_AUTH_PORT, 10) : 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #607ee9b7fe9ce807 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:245 
        const response = await fetch(endpoint, {
            method: 'POST',
            headers: {
                'Content-Type': 'application/x-www-form-urlencoded'
            },
            body: new URLSearchParams({
                token: token
            }).toString()
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #a7e943d76276901e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/honoWebStandardStreamableHttp.ts:69 
const PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9808da7367b2b692 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:621 
const MCP_PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #8d396a53b716ec8d — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:622 
const AUTH_PORT = process.env.MCP_AUTH_PORT ? parseInt(process.env.MCP_AUTH_PORT, 10) : 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #68712975c2108b8f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:643 
            const response = await fetch(endpoint, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded'
                },
                body: new URLSearchParams({
                    token: token
                }).toString()
            });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #722450d9e269f943 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleTaskInteractive.ts:448 
const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 8000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bec6b1e09371c0df — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.ts:12 
    process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL === 'true' || process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@paralleldrive/cuid2

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #f29e0cf422b0c6ad — Filesystem access.
pkgs/npm/@[email protected]/bin/cuid2.js:4 
import { writeFileSync, readFileSync, existsSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f18cfe5bbed566e7 — Filesystem access.
pkgs/npm/@[email protected]/bin/cuid2.js:51 
      const content = readFileSync(configPath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c14784163d9352f4 — Filesystem access.
pkgs/npm/@[email protected]/bin/cuid2.js:60 
        writeFileSync(configPath, newContent, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@prisma/instrumentation

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #4aba02fb9d1f2cf5 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/ActiveTracingHelper.ts:21 
const showAllTraces = process.env.PRISMA_SHOW_ALL_TRACES === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@tanstack/react-query

npm dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #d28b47a32e578d97 — Environment-variable access.
pkgs/npm/@[email protected]/src/useBaseQuery.ts:44 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #162733d8b0034447 — Environment-variable access.
pkgs/npm/@[email protected]/src/useBaseQuery.ts:69 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4c7071498032d8d — Environment-variable access.
pkgs/npm/@[email protected]/src/useSuspenseInfiniteQuery.ts:34 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94034195f22c753e — Environment-variable access.
pkgs/npm/@[email protected]/src/useSuspenseQueries.ts:194 
        if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a561831a33accb55 — Environment-variable access.
pkgs/npm/@[email protected]/src/useSuspenseQuery.ts:17 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@trpc/client

npm dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #9765e9e58565c8b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/links/wsLink/wsLink.ts:40 
        const requestSubscription = client
          .request({
            op,
            transformer,
          })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@trpc/next

npm dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #7c542b42cdbd117a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/app-dir/links/nextHttp.ts:52 
        return fetch(url, {
          ...fetchOpts,
          // cache: 'no-cache',
          next: {
            revalidate,
            tags: [cacheTag],
          },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

chroma-js

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #a68e5abc62dc34a5 — Filesystem access.
pkgs/npm/[email protected]/.bin/update-version.cjs:2 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7c6abf89ae376e5 — Filesystem access.
pkgs/npm/[email protected]/.bin/update-version.cjs:8 
const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8ff8600deb77a5d — Filesystem access.
pkgs/npm/[email protected]/.bin/update-version.cjs:13 
fs.writeFileSync(versionFilePath, versionFileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

core-js

npm dependency
expand_more 6 low-confidence finding(s)
low egress dependency Excluded from app score #4e4aecda87ac8140 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/internals/url-constructor-detection.js:32 
    || new URL('https://a@b').username !== 'a'

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #85549cd25b8e44a6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/internals/url-constructor-detection.js:35 
    || new URL('https://тест').host !== 'xn--e1aybc'

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #873812025bc648e2 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/internals/url-constructor-detection.js:37 
    || new URL('https://a#б').hash !== '#%D0%B1'

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #5814916a1b0dffb5 — Filesystem access.
pkgs/npm/[email protected]/postinstall.js:4 
var fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #605c97628886d4ad — Filesystem access.
pkgs/npm/[email protected]/postinstall.js:44 
      banners = JSON.parse(fs.readFileSync(file));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ca88fbb40b961ca — Filesystem access.
pkgs/npm/[email protected]/postinstall.js:52 
    fs.writeFileSync(file, JSON.stringify(banners), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fastest-levenshtein

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #89247e848cc909d7 — Filesystem access.
pkgs/npm/[email protected]/bench.js:8 
var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce0212c456d677c9 — Filesystem access.
pkgs/npm/[email protected]/bench.js:43 
    fs.writeFileSync("data.json", JSON.stringify(data_1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8fc6197f4794004 — Filesystem access.
pkgs/npm/[email protected]/bench.js:45 
var data = JSON.parse(fs.readFileSync("data.json", "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ioredis

npm dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #90e1258c73d96c24 — Filesystem access.
pkgs/npm/[email protected]/built/utils/index.js:4 
const fs_1 = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2312c90c9ab774b3 — Filesystem access.
pkgs/npm/[email protected]/built/utils/index.js:362 
        const data = await fs_1.promises.readFile(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jsonpath-plus

npm dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #1c902b2052c2cee5 — Filesystem access.
pkgs/npm/[email protected]/bin/jsonpath-cli.js:2 
import {readFile} from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3b72429dd4aa0fe — Filesystem access.
pkgs/npm/[email protected]/bin/jsonpath-cli.js:9 
    const json = JSON.parse(await readFile(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

langfuse

npm dependency
expand_more 6 low-confidence finding(s)
low egress dependency Excluded from app score #ec172bc6074c9178 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.cjs.js:174 
    this.customFetch = (...fetchParams) => fetch(...fetchParams);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b8a634420c1c02e9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.cjs.js:1477 
    return fetch(url, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7acc0f3c938f55e8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.cjs.js:1519 
    return fetch(url, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ed459562ee2546d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.mjs:171 
    this.customFetch = (...fetchParams) => fetch(...fetchParams);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #329a624d2f855aec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.mjs:1474 
    return fetch(url, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3aa77a0a85e5307d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.mjs:1516 
    return fetch(url, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

nanoid

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #1f62ca8e52f17b6f — Filesystem access.
pkgs/npm/[email protected]/bin/nanoid.js:18 
  let json = readFileSync(join(import.meta.dirname, '..', 'package.json'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • @baselime/trpc-opentelemetry-middleware prod — dist-only: no readable source
  • @codemirror/autocomplete prod — dist-only: no readable source
  • @codemirror/language prod — dist-only: no readable source
  • @codemirror/lint prod — dist-only: no readable source
  • @codemirror/search prod — dist-only: no readable source
  • @codemirror/state prod — dist-only: no readable source
  • @langfuse/shared prod — registry 404
  • @next-auth/prisma-adapter prod — dist-only: no readable source
  • @radix-ui/react-switch prod — dist-only: no readable source
  • @radix-ui/react-tabs prod — dist-only: no readable source
  • @radix-ui/react-toggle prod — dist-only: no readable source
  • @radix-ui/react-toggle-group prod — dist-only: no readable source
  • @radix-ui/react-tooltip prod — dist-only: no readable source
  • @t3-oss/env-nextjs prod — dist-only: no readable source
  • bullmq prod — dist-only: no readable source
  • class-variance-authority prod — dist-only: no readable source
  • cmdk prod — dist-only: no readable source
  • https-proxy-agent prod — dist-only: no readable source
  • json-schema-faker prod — dist-only: no readable source
  • next prod — scan budget exceeded
  • next-auth prod — scan budget exceeded
  • next-query-params prod — scan budget exceeded
  • next-themes prod — scan budget exceeded
  • posthog-js prod — scan budget exceeded
  • posthog-node prod — scan budget exceeded
  • prexit prod — scan budget exceeded
  • prism-react-renderer prod — scan budget exceeded
  • protobufjs prod — scan budget exceeded
  • rate-limiter-flexible prod — scan budget exceeded
  • react prod — scan budget exceeded
  • react-day-picker prod — scan budget exceeded
  • react-dom prod — scan budget exceeded
  • react-dropzone prod — scan budget exceeded
  • react-grid-layout prod — scan budget exceeded
  • react-hook-form prod — scan budget exceeded
  • react-icons prod — scan budget exceeded
  • react-markdown prod — scan budget exceeded
  • react-resizable prod — scan budget exceeded
  • react-resizable-panels prod — scan budget exceeded
  • react-responsive prod — scan budget exceeded
  • react18-json-view prod — scan budget exceeded
  • recharts prod — scan budget exceeded
  • remark-gfm prod — scan budget exceeded
  • sonner prod — scan budget exceeded
  • streamdown prod — scan budget exceeded
  • stripe prod — scan budget exceeded
  • superjson prod — scan budget exceeded
  • tailwind-merge prod — scan budget exceeded
  • tailwindcss-animate prod — scan budget exceeded
  • use-query-params prod — scan budget exceeded
  • uuid prod — scan budget exceeded
  • vaul prod — scan budget exceeded
  • yaml prod — scan budget exceeded
  • zod prod — scan budget exceeded
  • zustand prod — scan budget exceeded
  • @anthropic-ai/tokenizer prod — scan budget exceeded
  • @opentelemetry/instrumentation-express prod — scan budget exceeded
  • @opentelemetry/instrumentation-undici prod — scan budget exceeded
  • @prisma/client prod — scan budget exceeded
  • exponential-backoff prod — scan budget exceeded
  • express prod — scan budget exceeded
  • helmet prod — scan budget exceeded
  • p-limit prod — scan budget exceeded
  • tiktoken prod — scan budget exceeded
  • @eslint/js prod — scan budget exceeded
  • @repo/eslint-plugin prod — scan budget exceeded
  • eslint-config-next prod — scan budget exceeded
  • eslint-config-prettier prod — scan budget exceeded
  • eslint-config-turbo prod — scan budget exceeded
  • eslint-plugin-only-warn prod — scan budget exceeded
  • typescript-eslint prod — scan budget exceeded
  • @ai-sdk/anthropic prod — scan budget exceeded
  • @ai-sdk/azure prod — scan budget exceeded
  • @ai-sdk/google prod — scan budget exceeded
  • @ai-sdk/google-vertex prod — scan budget exceeded
  • @ai-sdk/openai prod — scan budget exceeded
  • @ai-sdk/openai-compatible prod — scan budget exceeded
  • @aws-sdk/client-cloudwatch prod — scan budget exceeded
  • @aws-sdk/client-lambda prod — scan budget exceeded
  • @aws-sdk/client-s3 prod — scan budget exceeded
  • @aws-sdk/client-sesv2 prod — scan budget exceeded
  • @aws-sdk/lib-storage prod — scan budget exceeded
  • @aws-sdk/s3-request-presigner prod — scan budget exceeded
  • @azure/storage-blob prod — scan budget exceeded
  • @clickhouse/client prod — scan budget exceeded
  • @google-cloud/storage prod — scan budget exceeded
  • @opentelemetry/otlp-transformer prod — scan budget exceeded
  • @react-email/components prod — scan budget exceeded
  • @react-email/render prod — scan budget exceeded
  • @slack/oauth prod — scan budget exceeded
  • @slack/web-api prod — scan budget exceeded
  • @smithy/node-http-handler prod — scan budget exceeded
  • ai prod — scan budget exceeded
  • ajv prod — scan budget exceeded
  • ajv-formats prod — scan budget exceeded
  • google-auth-library prod — scan budget exceeded
  • ipaddr.js prod — scan budget exceeded
  • langfuse-langchain prod — scan budget exceeded
  • lossless-json prod — scan budget exceeded
  • lru-cache prod — scan budget exceeded
  • nodemailer prod — scan budget exceeded
  • oci-common prod — scan budget exceeded
  • oci-objectstorage prod — scan budget exceeded
  • safe-regex2 prod — scan budget exceeded
  • slackify-markdown prod — scan budget exceeded
  • undici prod — scan budget exceeded
  • winston prod — scan budget exceeded