Close Open Privacy Scan

link https://github.com/stitionai/devika
bolt Snapshot: commit 80bb343
science engine v1.21
schedule 2026-07-17T12:12:54.298185+00:00

verified_user Possible application data leak

Potential data exfiltration identified in application code.

smart_toy AI deps detected: anthropic, google-generativeai, mistralai, openai — detected in dependencies, not a safety judgment.

App Privacy Score

67 /100
Medium privacy risk — possible application leak

Medium risk · 1611 finding(s)

Dependency score: 0 (High risk)

bar_chart Score Breakdown

egress −15
pii_flow −15
env_fs −3

list Scan Summary

0 high 29 medium 1582 low
First-party packages: 1
Dependency packages: 27
Ecosystem: python

swap_horiz Potential data exfiltration in application code

External domains: 0001:002:003:0004::11.2.3.4aiplatform.eu.rep.googleapis.comaiplatform.googleapis.comaiplatform.us.rep.googleapis.comapi.anthropic.comapi.eu.mistral.aiapi.github.comapi.groq.comapi.mistral.aiapi.netlify.comapi.openai.comapi.us.mistral.aiauth.openai.combjoern.hoehrmann.debugs.python.orgcdnjs.cloudflare.comclaude.googleapis.comcloud.google.comcode.activestate.comconsole.groq.comconsole.mistral.aicookbook.openai.comcreativecommons.orgcryptography.iocurl.sedatatracker.ietf.orgdeveloper.mozilla.orgdocs.anthropic.comdocs.cohere.aidocs.mathjax.orgdocs.mistral.aidocs.pydantic.devdocs.python.orgdocutils.sourceforge.netduckduckgo.comen.wikipedia.orgengineering.salesforce.comeventlet.readthedocs.ioexample-resource.azure.openai.comexample-resource.services.ai.azure.comflask.palletsprojects.comgit-scm.comgithub.bloggithub.comgithub.github.comgoogle.comgoogle.github.iohelp.openai.comhtml.duckduckgo.comhtml.spec.whatwg.orghttpbin.orghttpwg.orghuggingface.coimg.website.comjira.atlassian.comjson-schema.orgjsonlines.orglangchain.readthedocs.iolearn.microsoft.comlinks.duckduckgo.comlite.duckduckgo.commanagement.azure.commaruku.rubyforge.orgmichelf.commodel-spec.openai.commodelcontextprotocol.ionginx.orgnodatime.orgnull.python.orgocsp.verisign.comollama.comopenai.comopenaipublic.blob.core.windows.netopensource.orgopentelemetry.iopackaging.python.orgpartners.adobe.complatform.claude.complatform.openai.compygments.orgpypi.orgpypi.python.orgpython-markdown.github.iopython.example.orgpython.orgrequests.readthedocs.iosetuptools.readthedocs.iosome.hostnamespeakeasy.comspec.commonmark.orgstackoverflow.comsvrintl-g3-aia.verisign.comsvrintl-g3-crl.verisign.comtestca.pythontest.nettfhub.devtimeapi.iotools.ietf.orgtowardsdatascience.comtwitter.comtyping-extensions.readthedocs.iounpkg.comurllib3.readthedocs.iowebsockets.readthedocs.iowww.apache.orgwww.bing.comwww.blackhat.comwww.cacert.orgwww.cracker.comwww.ctan.orgwww.djangoproject.comwww.dnspython.orgwww.gevent.orgwww.github.comwww.gitlab.comwww.google.comwww.googleapis.comwww.iana.orgwww.itu.intwww.libpng.orgwww.linuxprogrammingblog.comwww.microsoft.comwww.openssl.orgwww.opentable.comwww.perl.orgwww.pyopenssl.orgwww.python.orgwww.rfc-editor.orgwww.sbert.netwww.w3.orgwwwsearch.sf.netyahoo.comzopecomponent.readthedocs.io

medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/src/services/github.py:10 → repo/src/services/github.py:11

</> First-Party Code

first-party (python)

python first-party
medium pii_flow production #4c2a6973ff24c007 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/src/services/github.py:11 · flow /tmp/closeopen-2ygl6pi1/repo/src/services/github.py:10 → /tmp/closeopen-2ygl6pi1/repo/src/services/github.py:11 
        response = requests.get(
            "https://api.github.com/user/repos", headers=headers
        )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 30 low-confidence finding(s)
low env_fs production #d4d80a840b91b8d7 — Environment-variable access.
repo/devika.py:44 
os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3acccac8c02af96a — Filesystem access.
repo/src/agents/action/action.py:9 
PROMPT = open("src/agents/action/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1084a2832a724d7e — Filesystem access.
repo/src/agents/answer/answer.py:9 
PROMPT = open("src/agents/answer/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dea048f4a652d28e — Filesystem access.
repo/src/agents/coder/coder.py:14 
PROMPT = open("src/agents/coder/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df37dea06f3ef605 — Filesystem access.
repo/src/agents/coder/coder.py:77 
            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1606f00305cb2757 — Filesystem access.
repo/src/agents/decision/decision.py:8 
PROMPT = open("src/agents/decision/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21a7ad8702f5abce — Filesystem access.
repo/src/agents/feature/feature.py:13 
PROMPT = open("src/agents/feature/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff96b1d0b6baa39c — Filesystem access.
repo/src/agents/feature/feature.py:75 
            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e31a0d4dd7a25cc — Filesystem access.
repo/src/agents/formatter/formatter.py:5 
PROMPT = open("src/agents/formatter/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cb7efbe515937cf — Filesystem access.
repo/src/agents/internal_monologue/internal_monologue.py:8 
PROMPT = open("src/agents/internal_monologue/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b0370d23cbc6ed4 — Filesystem access.
repo/src/agents/patcher/patcher.py:13 
PROMPT = open("src/agents/patcher/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f17590f47bfd9e25 — Filesystem access.
repo/src/agents/patcher/patcher.py:78 
            with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7bf624f5690ec4b — Filesystem access.
repo/src/agents/planner/planner.py:5 
PROMPT = open("src/agents/planner/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fb68cd2716fca24 — Filesystem access.
repo/src/agents/reporter/reporter.py:8 
PROMPT = open("src/agents/reporter/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a93b47ef46ab7af1 — Filesystem access.
repo/src/agents/researcher/researcher.py:10 
PROMPT = open("src/agents/researcher/prompt.jinja2").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a923980a73766b83 — Filesystem access.
repo/src/agents/runner/runner.py:15 
PROMPT = open("src/agents/runner/prompt.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ede886aa3dd140a6 — Filesystem access.
repo/src/agents/runner/runner.py:16 
RERUNNER_PROMPT = open("src/agents/runner/rerunner.jinja2", "r").read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #16080986e4bb961a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/browser/search.py:22 
            response = requests.get(self.bing_api_endpoint, headers=headers, params=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8eb2a6456bdf759c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/browser/search.py:49 
            response = requests.get(self.google_search_api_endpoint, params=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #e4519554e52ebcd4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/browser/search.py:101 
            resp = self.asession.request(method, url, data=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e974db7f07d790b0 — Filesystem access.
repo/src/config.py:17 
            with open("sample.config.toml", "r") as f_in, open("config.toml", "w+") as f_out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #590b789555d7912a — Filesystem access.
repo/src/config.py:23 
            with open("sample.config.toml", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3247feb224278bf8 — Filesystem access.
repo/src/config.py:26 
            with open("config.toml", "r+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #977c6560b67ecbf4 — Filesystem access.
repo/src/config.py:183 
        with open("config.toml", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab6e0f86b0759170 — Filesystem access.
repo/src/config.py:189 
                with open("config.toml", "r+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b420f139189327d0 — Filesystem access.
repo/src/documenter/pdf.py:17 
        with open(out_file_path, "wb") as out_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8aa2a8dc67a7944b — Filesystem access.
repo/src/filesystem/read_code.py:21 
                    with open(file_path, 'r') as file_content:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #abc02fe55bac75d9 — Filesystem access.
repo/src/logger.py:16 
        with open(self.logger.pathName, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b2b2c29081fb971 — Filesystem access.
repo/src/project.py:168 
                    with open(os.path.join(root, filename), 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #746527e9cc23b3fb — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/services/github.py:11 
        response = requests.get(
            "https://api.github.com/user/repos", headers=headers
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

</> Dependencies

mistralai

python dependency
medium telemetry dependency Excluded from app score #5871693c35fbb8f4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/client/_hooks/traceparent.py:5 
from opentelemetry.propagate import inject

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #7941cf7feec53999 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/client/_hooks/tracing.py:8 
from opentelemetry import context as context_api

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #cfd5b530cf4a52fc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/client/_hooks/tracing.py:9 
from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #eeebbfd4286dec26 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/client/_hooks/tracing.py:10 
from opentelemetry.trace import Span, Status, StatusCode, set_span_in_context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #158ff4c2c00424dc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/__init__.py:4 
from opentelemetry import trace as otel_trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #27c1732bec8f8293 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:17 
import opentelemetry.semconv._incubating.attributes.gen_ai_attributes as gen_ai_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #e116cba017b9e6b9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:18 
import opentelemetry.semconv._incubating.attributes.http_attributes as http_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #d460c6c1874d3425 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:19 
import opentelemetry.semconv.attributes.error_attributes as error_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #98d8378aa84ab520 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:20 
import opentelemetry.semconv.attributes.server_attributes as server_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #fcbd7c05c5ce6a0f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:21 
from opentelemetry import context as context_api

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #148f059d6e26077a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:22 
from opentelemetry import propagate, trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #adf27e8952c6a647 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:23 
from opentelemetry.baggage import get_baggage

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #21feabc07a27333f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:24 
from opentelemetry.trace import Span, Status, StatusCode, Tracer, set_span_in_context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #626afe2fdf1a20c3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/redaction.py:26 
    from opentelemetry.sdk.trace import ReadableSpan

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #535674e198bc342f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/redaction.py:27 
    from opentelemetry.sdk.trace.export import SpanExporter, SpanExportResult

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #4031d822172c942f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/redaction.py:102 
        from opentelemetry.sdk.resources import Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #3b5ad85cf795075b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/redaction.py:103 
        from opentelemetry.sdk.trace import Event, ReadableSpan

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #9b9fc03b7e534235 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/redaction.py:104 
        from opentelemetry.trace import Link, SpanKind, Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #60071571edf57f8e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/redaction_policies.py:14 
from opentelemetry.util.types import AttributeValue

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #7423862da91f6fe2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:10 
from opentelemetry import trace as otel_trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #f33798e9ce4762e6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:22 
    from opentelemetry.sdk.trace import TracerProvider as SDKTracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #bbfc787f75660307 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:346 
        from opentelemetry.exporter.otlp.proto.http.trace_exporter import (
            OTLPSpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #b9ad59ade3928920 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:349 
        from opentelemetry.sdk.resources import Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #8379c6e2073e5b74 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:350 
        from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #6213cea8e7d8bf45 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:351 
        from opentelemetry.sdk.trace.export import BatchSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #eaddb034d464e91c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/run/tools.py:8 
import opentelemetry.semconv._incubating.attributes.gen_ai_attributes as gen_ai_attributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #08917e7fea364c61 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/run/tools.py:16 
from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #c953aa77fb780f10 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/mistralai/extra/run/tools.py:17 
from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 11 low-confidence finding(s)
low env_fs dependency Excluded from app score #bdf195bfe519b318 — Environment-variable access.
pkgs/python/[email protected]/packages/azure/src/mistralai/azure/client/utils/values.py:63 
    env_value = os.getenv(env_key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77aa538995e2b507 — Environment-variable access.
pkgs/python/[email protected]/packages/gcp/src/mistralai/gcp/client/utils/values.py:63 
    env_value = os.getenv(env_key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c7814e8ae4a9fb5 — Environment-variable access.
pkgs/python/[email protected]/src/mistralai/client/utils/logger.py:25 
    if os.getenv("MISTRAL_DEBUG"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #035908006ed1d844 — Environment-variable access.
pkgs/python/[email protected]/src/mistralai/client/utils/security.py:80 
    if os.getenv("MISTRAL_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41cd2742854f5080 — Environment-variable access.
pkgs/python/[email protected]/src/mistralai/client/utils/security.py:81 
        security_dict["api_key"] = os.getenv("MISTRAL_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19295a55ada2ab70 — Environment-variable access.
pkgs/python/[email protected]/src/mistralai/client/utils/values.py:64 
    env_value = os.getenv(env_key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #e90562fcf075dc83 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/mistralai/extra/mcp/auth.py:109 
    response = await async_client.post(register_endpoint, json=registration_payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2d8a0bb38962e47b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/mistralai/extra/mcp/sse.py:133 
        response = httpx.get(
            self._sse_params.url,
            headers=self._format_headers(),
            timeout=self._sse_params.timeout,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #a68a329713f3d468 — Environment-variable access.
pkgs/python/[email protected]/src/mistralai/extra/observability/otel.py:40 
    os.getenv("MISTRAL_SDK_DEBUG_TRACING", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2d56753e5f16572 — Environment-variable access.
pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:80 
    env_value = os.getenv(MISTRAL_SDK_TELEMETRY_ENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #169121f13f668a6e — Environment-variable access.
pkgs/python/[email protected]/src/mistralai/extra/observability/telemetry.py:363 
    return os.getenv(
        MISTRAL_OTLP_TRACES_ENDPOINT_ENV,
        MISTRAL_TELEMETRY_ENDPOINT,
    ).strip() or MISTRAL_TELEMETRY_ENDPOINT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Flask-SocketIO

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #efb49aca186829a0 — Environment-variable access.
pkgs/python/[email protected]/src/flask_socketio/__init__.py:254 
        if os.environ.get('FLASK_RUN_FROM_CLI'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

GitPython

python dependency
expand_more 55 low-confidence finding(s)
low env_fs dependency Excluded from app score #dfdf666a76397a9c — Filesystem access.
pkgs/python/[email protected]/doc/source/conf.py:50 
with open(os.path.join(os.path.dirname(__file__), "..", "..", "VERSION")) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f0d51c29218e6af — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:668 
    GIT_PYTHON_TRACE = os.environ.get("GIT_PYTHON_TRACE", False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a69d540842887cc0 — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:784 
            new_git = os.environ.get(cls._git_exec_env_var, cls.git_exec_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d4bc8b0c4c33144 — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:833 
                mode = os.environ.get(cls._refresh_env_var, "raise").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cde7b940629b091 — Environment-variable access.
pkgs/python/[email protected]/git/cmd.py:1369 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0f7fd11077a4419 — Filesystem access.
pkgs/python/[email protected]/git/cmd.py:1391 
        stdout_sink = PIPE if with_stdout else getattr(subprocess, "DEVNULL", None) or open(os.devnull, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #960c4e19d0e81502 — Environment-variable access.
pkgs/python/[email protected]/git/config.py:259 
        config_home = os.environ.get("XDG_CONFIG_HOME") or osp.join(os.environ.get("HOME", "~"), ".config")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4a7be6bce7f4412 — Filesystem access.
pkgs/python/[email protected]/git/config.py:652 
                    with open(file_path, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0668e02eb59ac1dc — Filesystem access.
pkgs/python/[email protected]/git/config.py:770 
            with open(fp, "wb") as fp_open:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #833ee49c49106b1a — Filesystem access.
pkgs/python/[email protected]/git/index/base.py:705 
                return open(filepath, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9b9f2f2c2b39f78 — Filesystem access.
pkgs/python/[email protected]/git/index/base.py:1180 
        with open(self._commit_editmsg_filepath(), "wb") as commit_editmsg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #258e2253e960fbad — Filesystem access.
pkgs/python/[email protected]/git/index/base.py:1187 
        with open(self._commit_editmsg_filepath(), "rb") as commit_editmsg_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9e59553d1369309 — Environment-variable access.
pkgs/python/[email protected]/git/index/fun.py:89 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f52f40e9eab9678c — Environment-variable access.
pkgs/python/[email protected]/git/objects/commit.py:681 
        env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a42b626570484855 — Filesystem access.
pkgs/python/[email protected]/git/objects/submodule/base.py:428 
        with open(git_file, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93729bafa3da68e1 — Filesystem access.
pkgs/python/[email protected]/git/refs/log.py:267 
        with open(filepath, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44ebb2debac5807a — Filesystem access.
pkgs/python/[email protected]/git/refs/log.py:363 
            fd = open(filepath, "ab")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a776ec90221046d1 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:152 
            with open(cls._get_packed_refs_path(repo), "rt", encoding="UTF-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7078157564916ad5 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:265 
            with open(os.path.join(repodir, ref_path), "rt", encoding="UTF-8") as fp:  # type: ignore[arg-type]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5a5aa6a134400bd — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:668 
                with open(pack_file_path, "rb") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a93e3e32bff27d79 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:696 
                    with open(pack_file_path, "wb") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3348325304ea66bc — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:738 
            with open(abs_ref_path, "rb") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71a7e515f5667385 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:822 
                with open(new_abs_path, "rb") as fd1:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b98aa40fb913f18 — Filesystem access.
pkgs/python/[email protected]/git/refs/symbolic.py:824 
                with open(cur_abs_path, "rb") as fd2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab40568c9549813b — Filesystem access.
pkgs/python/[email protected]/git/remote.py:918 
        with open(fetch_head.abspath, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bedf1abd70df536 — Environment-variable access.
repo/base.py:230 
        epath = path or os.getenv("GIT_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ec746ebc510df6f — Environment-variable access.
repo/base.py:266 
                if "GIT_WORK_TREE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89273ea64d46a67f — Environment-variable access.
repo/base.py:267 
                    self._working_tree_dir = os.getenv("GIT_WORK_TREE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b33922da4b576d7b — Filesystem access.
repo/base.py:271 
                    with open(osp.join(git_dir, "gitdir")) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #833433ffbd149ccd — Environment-variable access.
repo/base.py:294 
                if os.environ.get("GIT_COMMON_DIR") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c01bd725cd910e6 — Environment-variable access.
repo/base.py:298 
                if "GIT_WORK_TREE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12c6ebe1f4089e87 — Environment-variable access.
repo/base.py:299 
                    self._working_tree_dir = os.getenv("GIT_WORK_TREE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abf1c418d1f49b28 — Filesystem access.
repo/base.py:336 
            common_dir = (Path(self.git_dir) / "commondir").read_text().splitlines()[0].strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10bdf2ca44969034 — Filesystem access.
repo/base.py:397 
        with open(filename, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f71eb0ab12baf572 — Filesystem access.
repo/base.py:403 
        with open(filename, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56f9f20171509640 — Environment-variable access.
repo/base.py:678 
            config_home = os.environ.get("XDG_CONFIG_HOME") or osp.join(os.environ.get("HOME", "~"), ".config")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3051cd82bf039124 — Filesystem access.
repo/base.py:952 
            with open(alternates_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13ce43b0343f8c6a — Filesystem access.
repo/base.py:975 
            with open(alternates_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #462cdd89be7e893b — Filesystem access.
repo/base.py:1729 
        with open(rebase_head_file, "rt") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7d0b34376dd6d5b — Filesystem access.
repo/fun.py:55 
    with open(filename, "ab"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #796e217ecf7cedf2 — Environment-variable access.
repo/fun.py:69 
        if (osp.isdir(osp.join(d, "objects")) or "GIT_OBJECT_DIRECTORY" in os.environ) and osp.isdir(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbbe666963b7b455 — Filesystem access.
repo/fun.py:93 
        lines = Path(dotgit).read_text().splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5fac49871c87962 — Filesystem access.
repo/fun.py:108 
        with open(d) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1911ff83c5a0e8f3 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:122 
        value = os.environ[name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50817d26111fe9eb — Environment-variable access.
pkgs/python/[email protected]/git/util.py:201 
    old_value = os.getenv(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #806e217996d3dc74 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:202 
    os.environ[name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fef6d670bfd704b1 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:207 
            del os.environ[name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0863fcab9be91a0e — Environment-variable access.
pkgs/python/[email protected]/git/util.py:209 
            os.environ[name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3950c4a33efc0cfc — Environment-variable access.
pkgs/python/[email protected]/git/util.py:338 
    PATHEXT = os.environ.get("PATHEXT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3346348f1d2786b — Environment-variable access.
pkgs/python/[email protected]/git/util.py:374 
        path = os.environ["PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #308d918dcfe61024 — Environment-variable access.
pkgs/python/[email protected]/git/util.py:868 
                val = os.environ[evar]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ef543baf9b88011 — Filesystem access.
pkgs/python/[email protected]/git/util.py:1054 
            with open(lock_file, mode="w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bd605af1a05dfbf — Filesystem access.
pkgs/python/[email protected]/setup.py:14 
    return (Path(__file__).parent / path).read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f415df4de3cffd3 — Filesystem access.
pkgs/python/[email protected]/setup.py:49 
        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa99d10e7425b2af — Filesystem access.
pkgs/python/[email protected]/setup.py:59 
        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Jinja2

python dependency
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #db7b28c9366f40bc — Filesystem access.
pkgs/python/[email protected]/src/jinja2/bccache.py:270 
            f = open(filename, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #89dbfc84280c4b0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/jinja2/bccache.py:390 
            code = self.client.get(self.prefix + bucket.key)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #89105699016ec2c0 — Filesystem access.
pkgs/python/[email protected]/src/jinja2/environment.py:860 
                with open(os.path.join(target, filename), "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33543e1e1b0d01ee — Filesystem access.
pkgs/python/[email protected]/src/jinja2/environment.py:1611 
            real_fp: t.IO[bytes] = open(fp, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #732c94b2c04d2000 — Filesystem access.
pkgs/python/[email protected]/src/jinja2/loaders.py:214 
        with open(filename, encoding=self.encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4037468b03ea52bf — Filesystem access.
pkgs/python/[email protected]/src/jinja2/loaders.py:382 
            with open(p, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5c6c129be8ad35c — Filesystem access.
pkgs/python/[email protected]/src/jinja2/utils.py:171 
    return open(filename, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Markdown

python dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #cfb1295fb8a5518f — Filesystem access.
pkgs/python/[email protected]/markdown/__main__.py:106 
        with open(
            options.configfile, mode="r", encoding=options.encoding
        ) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e87a1f396a06b41 — Filesystem access.
pkgs/python/[email protected]/markdown/core.py:434 
                input_file = open(input, mode="r", encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #962bfef31512173d — Filesystem access.
pkgs/python/[email protected]/markdown/test_tools.py:151 
                with open(infile, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26eebc5223ad7425 — Filesystem access.
pkgs/python/[email protected]/markdown/test_tools.py:153 
                with open(outfile, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

anthropic

python dependency
expand_more 122 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #9138793340c9e952 — Environment-variable access.
pkgs/python/[email protected]/examples/agents.py:9 
    anthropic = Anthropic(api_key=os.environ.get("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow tooling Excluded from app score unreachable #d75dfbb860bd0b45 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents.py:15 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents.py:15 
    print("Created environment:", environment.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #0aaf39e7836efca3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents.py:22 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents.py:22 
    print("Created agent:", agent.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #4008c25ac9360cb5 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents.py:29 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents.py:29 
    print("Created session:", session.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #a318c09868047e2e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents.py:45 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents.py:9 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents.py:45 
            print(event.to_json(indent=2))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs tooling Excluded from app score unreachable #23503d247d8521c2 — Environment-variable access.
pkgs/python/[email protected]/examples/agents_comprehensive.py:18 
    anthropic = Anthropic(api_key=os.environ.get("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #a68cb0bbb383b74d — Environment-variable access.
pkgs/python/[email protected]/examples/agents_comprehensive.py:20 
    github_token = os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow tooling Excluded from app score unreachable #f09e44e30f0ab110 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_comprehensive.py:28 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:28 
    print("Created environment:", environment.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #7852db36de7961f2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_comprehensive.py:32 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:32 
    print("Created vault:", vault.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #6f9ca7ebcb08850f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_comprehensive.py:43 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:43 
    print("Created credential:", credential.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs tooling Excluded from app score unreachable #b772c7294e3f6386 — Filesystem access.
pkgs/python/[email protected]/examples/agents_comprehensive.py:47 
    with open(skill_md_path, "rb") as skill_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow tooling Excluded from app score unreachable #ddeda797f5c44a6c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_comprehensive.py:52 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:52 
    print("Created skill:", skill.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #e538b0c6c67d6138 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_comprehensive.py:75 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:75 
    print("Created agent v1:", agent_v1.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #09e181f70d34fa30 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_comprehensive.py:86 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:86 
    print("Patched agent to v2:", agent.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #8dadc8961aeeee61 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_comprehensive.py:89 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:89 
    print("Agent versions:", versions.data)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #a99dbe834fd9a780 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_comprehensive.py:97 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:97 
    print("Created session:", session.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #f54e8fcabb4ab061 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_comprehensive.py:108 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:18 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_comprehensive.py:108 
            print(event.to_json(indent=2))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs tooling Excluded from app score unreachable #d688da91247ea8dc — Environment-variable access.
pkgs/python/[email protected]/examples/agents_with_files.py:10 
    anthropic = Anthropic(api_key=os.environ.get("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow tooling Excluded from app score unreachable #00052f08e78fa37f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_with_files.py:16 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:16 
    print("Created environment:", environment.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #ad1915b15841df5e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_with_files.py:32 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:32 
    print("Created agent:", agent.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #7519119f6d4f02e2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_with_files.py:38 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:38 
    print("Uploaded file:", file.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #3179f1bb7e6aacce — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_with_files.py:52 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:52 
    print("Created session:", session.id)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #e5d6ccd4cc6ee641 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_with_files.py:55 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:55 
    print("Listed session resources:", resources.data)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow tooling Excluded from app score unreachable #5b9e9ad9489dbd6a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
pkgs/python/[email protected]/examples/agents_with_files.py:76 · flow /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:10 → /tmp/closeopen-2ygl6pi1/pkgs/python/[email protected]/examples/agents_with_files.py:76 
            print(event.to_json(indent=2))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs tooling Excluded from app score unreachable #da797ef51bcd1ded — Environment-variable access.
pkgs/python/[email protected]/examples/managed-agents-observe-tool-calls.py:46 
    val = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #aeb1ac0c9bf937f4 — Environment-variable access.
pkgs/python/[email protected]/examples/managed-agents-observe-tool-calls.py:64 
    workdir = os.environ.get("ANTHROPIC_WORKDIR", ".")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #92f29da2e85d87af — Environment-variable access.
pkgs/python/[email protected]/examples/managed-agents-self-hosted-sandbox-worker.py:48 
    val = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #892ad342f8f0788f — Environment-variable access.
pkgs/python/[email protected]/examples/managed-agents-self-hosted-sandbox-worker.py:60 
    workdir = os.environ.get("ANTHROPIC_WORKDIR", ".")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #5ca438fedbdbac0a — Environment-variable access.
pkgs/python/[email protected]/examples/workload_identity.py:70 
        identity_token_provider=lambda: os.environ["ANTHROPIC_IDENTITY_TOKEN"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #c895a102039f1b6b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/anthropic/_base_client.py:325 
        return await self._client.request(self._page_cls, self._options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #06b1e0a1e3a2726a — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:107 
    if api_key is not None and os.environ.get("ANTHROPIC_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4285cb91638a60e — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:109 
    if auth_token is not None and os.environ.get("ANTHROPIC_AUTH_TOKEN"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ef7816b5bdd31d9 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:214 
            api_key = os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f77cd96a2c0d915 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:215 
            auth_token = os.environ.get("ANTHROPIC_AUTH_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b70198df2d3269d — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:221 
            webhook_key = os.environ.get("ANTHROPIC_WEBHOOK_SIGNING_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3ce1d699b7eef51 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:225 
            base_url = os.environ.get("ANTHROPIC_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e03ebba8e439128 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:234 
        custom_headers_env = os.environ.get("ANTHROPIC_CUSTOM_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #158805b10c579153 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:634 
            api_key = os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc1a848c6fb08b94 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:635 
            auth_token = os.environ.get("ANTHROPIC_AUTH_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64e818c8294a2170 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:641 
            webhook_key = os.environ.get("ANTHROPIC_WEBHOOK_SIGNING_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a563a4af49fc06c — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:645 
            base_url = os.environ.get("ANTHROPIC_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d424d21f812c55dd — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_client.py:654 
        custom_headers_env = os.environ.get("ANTHROPIC_CUSTOM_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b85fc23f4987687 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_files.py:69 
            return (path.name, path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc0bf3dd700b0210 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_files.py:81 
        return pathlib.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18fa2776617d759d — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_files.py:111 
            return (path.name, await path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c90169f57b8b2ac — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_files.py:123 
        return await anyio.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0d02c813a2fd547 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_legacy_response.py:464 
        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19f4f9f44c4e6083 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_legacy_response.py:477 
        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a43103ca61166b32 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_models.py:120 
            extra="allow", defer_build=coerce_boolean(os.environ.get("DEFER_PYDANTIC_BUILD", "true"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0b002b26f75aa38 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_response.py:537 
        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a7be2d70c2d7aa2 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_response.py:579 
        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03529ee8ad360b52 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/_utils/_logs.py:17 
    env = os.environ.get("ANTHROPIC_LOG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #305a47fda23f47e9 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_utils/_transform.py:250 
            binary = data.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c888de59e0ce6d2 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_utils/_transform.py:418 
            binary = await anyio.Path(data).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5be2a57ff6b2c9ad — Filesystem access.
pkgs/python/[email protected]/src/anthropic/_utils/_utils.py:379 
    contents = Path(path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a129008db72e64e5 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/_files.py:25 
        files.append((path.relative_to(relative_to).as_posix(), path.read_bytes()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b0e6d94813a2169 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/_files.py:42 
        files.append((path.relative_to(relative_to).as_posix(), await path.read_bytes()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc99f0c691ce1dfe — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/aws/_credentials.py:25 
        value = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #736bc4fc0eb1b525 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/aws/_credentials.py:90 
    return os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a22df82f3a8216b — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:77 
    aws_region = os.environ.get("AWS_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eac1e61842519ff8 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:165 
            api_key = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ad925720379f573 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:190 
            base_url = os.environ.get("ANTHROPIC_BEDROCK_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae81ca81f04ee711 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:345 
            api_key = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c06175057483995 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/bedrock/_client.py:370 
            base_url = os.environ.get("ANTHROPIC_BEDROCK_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13ef18f565750ced — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/bedrock/_mantle.py:144 
        base_url = os.environ.get("ANTHROPIC_BEDROCK_MANTLE_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b50eac53f1b088b — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:33 
    federation_rule_id = os.environ.get(ENV_FEDERATION_RULE_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c61f7ad4cda55856 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:34 
    organization_id = os.environ.get(ENV_ORGANIZATION_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48cdccfd76c2e36c — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:35 
    has_literal_token = ENV_IDENTITY_TOKEN in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a52b429f926e74b7 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:50 
            value = os.environ.get(ENV_IDENTITY_TOKEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #831ad06fc565164c — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:65 
        service_account_id=os.environ.get(ENV_SERVICE_ACCOUNT_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7799ac266d1928e6 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:69 
        workspace_id=os.environ.get(ENV_WORKSPACE_ID) or None,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cafeeae098f2cf99 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:70 
        scope=os.environ.get(ENV_SCOPE),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ccd3fb788108a15 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:108 
    if os.environ.get(ENV_API_KEY):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4950d80d2a724ac9 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:112 
    auth_token = os.environ.get(ENV_AUTH_TOKEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46abcd7273b3cce5 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_chain.py:119 
    env_explicit = bool(os.environ.get(ENV_PROFILE) or os.environ.get(ENV_CONFIG_DIR))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3270f56520bc9597 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:78 
    env = os.environ.get(ENV_CONFIG_DIR)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c091e811ce93686 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:82 
        appdata = os.environ.get("APPDATA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b105c55d5e33a4b3 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:92 
        name = (_config_dir() / "active_config").read_text(encoding="utf-8").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae6094dc0408a015 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:105 
    env = os.environ.get(ENV_PROFILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e537e7d0faaeaf01 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:224 
    env = os.environ.get(ENV_IDENTITY_TOKEN_FILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37be49700e193d47 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:240 
    if os.environ.get(ENV_PROFILE) or os.environ.get(ENV_CONFIG_DIR):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c014857d4da9c321 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:244 
    if os.environ.get(ENV_FEDERATION_RULE_ID) and os.environ.get(ENV_ORGANIZATION_ID):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8b03ab966cd5c10 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_constants.py:245 
        if os.environ.get(ENV_IDENTITY_TOKEN_FILE) or os.environ.get(ENV_IDENTITY_TOKEN):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97d83efcb08cc27f — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:96 
            v = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7db3f605728de097 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:110 
            v = os.environ.get(ENV_IDENTITY_TOKEN_FILE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4134d38ecabc6511 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:136 
        value = os.environ.get(self._env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bdc92128e571422 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:284 
            raw = self._config_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf8d58266ed547b6 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:374 
            creds: Dict[str, Any] = _wrap_secret_fields(json.loads(path.read_text(encoding="utf-8")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #1926258387cdfa41 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:538 
            resp = self._get_http_client().post(
                f"{self._base_url}{TOKEN_ENDPOINT}",
                # Serialized inline so the raw request bytes are never bound
                # to a local here; SecretStr values unwrap at dump time.
                content=_json_dumps_secrets(body),
                headers={
                    "Content-Type": "application/json",
                    # oauth-2025-04-20 unlocks the token endpoint family. Do
                    # NOT send oidc-federation-2026-04-01 — that's a routing
                    # switch that misroutes refresh_token grants to the Go
                    # userauth handler, which only accepts jwt-bearer.
                    "anthropic-beta": OAUTH_API_BETA_HEADER,
                    "User-Agent": _user_agent(),
                },
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #14fe17b0cf389b87 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_providers.py:746 
            content = self._path.read_text(encoding="utf-8").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #d225019c80b39677 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/anthropic/lib/credentials/_workload.py:259 
            resp = self._http_client.post(
                url,
                # Serialized inline so the raw request bytes are never bound
                # to a local here; SecretStr values unwrap at dump time.
                content=_json_dumps_secrets(body),
                headers={
                    "anthropic-beta": _JWT_BEARER_BETA_HEADER,
                    "Content-Type": "application/json",
                    "User-Agent": _user_agent(),
                },
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #79083c6cc32690bf — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/environments/_worker.py:160 
    resolved = value or os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55583b5cea535c6c — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/foundry.py:157 
        api_key = api_key if api_key is not None else os.environ.get("ANTHROPIC_FOUNDRY_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #557f98d9840abeb1 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/foundry.py:158 
        resource = resource if resource is not None else os.environ.get("ANTHROPIC_FOUNDRY_RESOURCE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3f17d831956dbe5 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/foundry.py:159 
        base_url = base_url if base_url is not None else os.environ.get("ANTHROPIC_FOUNDRY_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6436db180e6c4614 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/foundry.py:382 
        api_key = api_key if api_key is not None else os.environ.get("ANTHROPIC_FOUNDRY_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #050735ffb87cf356 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/foundry.py:383 
        resource = resource if resource is not None else os.environ.get("ANTHROPIC_FOUNDRY_RESOURCE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33eabe8b704d19fe — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/foundry.py:384 
        base_url = base_url if base_url is not None else os.environ.get("ANTHROPIC_FOUNDRY_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #299619e95d900fe1 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:247 
            location = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_LOCATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7299b0b19f57127 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:252 
            project = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4750a21091f8877d — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:254 
            project = os.environ.get("GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d92691cad050370 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:260 
            base_url = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e054e9605129ab4d — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:266 
            workspace_id = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95a4dbc7f4d874a1 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:493 
            location = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_LOCATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #338acd093dae79a1 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:498 
            project = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34d779e2108485e0 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:500 
            project = os.environ.get("GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecf2b5a4a26f001f — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:506 
            base_url = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d45972c8f68bbfb — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/google_cloud/_client.py:510 
            workspace_id = os.environ.get("ANTHROPIC_GOOGLE_CLOUD_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #ee24e5e1284ae297 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/tools/_beta_builtin_memory_tool.py:356 
        return full_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #b916b15b4585f26e — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/tools/_beta_builtin_memory_tool.py:653 
        return await full_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #a0649634d8b6dfe5 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/tools/_skills.py:138 
                with zf.open(info) as src, open(target, "wb") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #eb7c6e127516c097 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/tools/_skills.py:164 
            with extracted as src, open(target, "wb") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #2e0609f05dcf80d9 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:123 
    return {k: v for k, v in os.environ.items() if not k.startswith("ANTHROPIC_")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #5ca819aeee35f4d4 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:512 
            text = target.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #366b2f16d3e5c866 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:540 
            target.write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #a13d9038c202adf2 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:570 
            text = target.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #5ae1be240c8ea541 — Filesystem access.
pkgs/python/[email protected]/src/anthropic/lib/tools/agent_toolset.py:582 
            target.write_text(updated)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15ab920247e2333f — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:46 
        project_id = os.environ.get("ANTHROPIC_VERTEX_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68d4b1268e16bd10 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:114 
            region = os.environ.get("CLOUD_ML_REGION", NOT_GIVEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f47596c9469cdea — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:121 
            base_url = os.environ.get("ANTHROPIC_VERTEX_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e7de83ca1623641 — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:278 
            region = os.environ.get("CLOUD_ML_REGION", NOT_GIVEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a575ae31bd3d6ce — Environment-variable access.
pkgs/python/[email protected]/src/anthropic/lib/vertex/_client.py:285 
            base_url = os.environ.get("ANTHROPIC_VERTEX_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

colorama

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #dbd2203851f37415 — Environment-variable access.
pkgs/python/[email protected]/colorama/ansitowin32.py:51 
        if 'PYCHARM_HOSTED' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

curl_cffi

python dependency
expand_more 14 low-confidence finding(s)
low env_fs dependency Excluded from app score #fe2531632fe1a2b5 — Filesystem access.
pkgs/python/[email protected]/curl_cffi/cli/output.py:213 
        with open(output_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1289dc5b75722641 — Filesystem access.
pkgs/python/[email protected]/curl_cffi/cli/request.py:105 
            files[field_name] = open(filepath, "rb")  # noqa: SIM115

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #352136de932bf224 — Filesystem access.
pkgs/python/[email protected]/curl_cffi/cli/run.py:113 
                        with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a08a949102b647b — Filesystem access.
pkgs/python/[email protected]/curl_cffi/cli/run.py:240 
        with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e01864f1d6272c92 — Environment-variable access.
pkgs/python/[email protected]/curl_cffi/curl.py:25 
        path = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b891eec3d0528d3d — Environment-variable access.
pkgs/python/[email protected]/curl_cffi/requests/session.py:289 
                os.environ.get("REQUESTS_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b15719e4b32eb995 — Environment-variable access.
pkgs/python/[email protected]/curl_cffi/requests/session.py:290 
                or os.environ.get("CURL_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #d520df09e54ff283 — Environment-variable access.
pkgs/python/[email protected]/scripts/build.py:21 
        or os.environ.get("CIBW_PLATFORM") == "android"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #93de81e6f6fb1f34 — Environment-variable access.
pkgs/python/[email protected]/scripts/build.py:22 
        or os.environ.get("ANDROID_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c1b03242056dae4d — Environment-variable access.
pkgs/python/[email protected]/scripts/build.py:23 
        or os.environ.get("ANDROID_DATA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #8220f96a706bfe52 — Environment-variable access.
pkgs/python/[email protected]/scripts/build.py:24 
        or os.environ.get("TERMUX_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #3ce610864577acc9 — Filesystem access.
pkgs/python/[email protected]/scripts/build.py:29 
    with open(Path(__file__).parent.parent / "libs.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #fdc503768da10833 — Environment-variable access.
pkgs/python/[email protected]/scripts/build.py:53 
                if "CI" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #ddde78df0634fb42 — Filesystem access.
pkgs/python/[email protected]/scripts/build.py:194 
with open(root_dir / "ffi/cdef.c") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

duckduckgo-search

python dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #24d0d13d372e8283 — Filesystem access.
pkgs/python/[email protected]/duckduckgo_search/cli.py:50 
    with open(jsonfile, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bc0b253c6841f53 — Filesystem access.
pkgs/python/[email protected]/duckduckgo_search/cli.py:55 
    with open(csvfile, "w", newline="", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #129ec7a03b2c5f98 — Filesystem access.
pkgs/python/[email protected]/duckduckgo_search/cli.py:100 
            with open(os.path.join(dir_path, filename[:200]), "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebf03639a1839c4f — Environment-variable access.
pkgs/python/[email protected]/duckduckgo_search/duckduckgo_search.py:60 
        ddgs_proxy: str | None = os.environ.get("DDGS_PROXY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #56987a635173e67c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/duckduckgo_search/duckduckgo_search.py:119 
            resp = self.client.request(
                method,
                url,
                params=params,
                content=content,
                data=data,
                headers=headers,
                cookies=cookies,
                json=json,
                timeout=timeout or self.timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

eventlet

python dependency
expand_more 20 low-confidence finding(s)
low env_fs dependency Excluded from app score #e7e2d289a3f62507 — Environment-variable access.
pkgs/python/[email protected]/eventlet/__init__.py:107 
if os.environ.get("EVENTLET_TESTS") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #4d5171a4a664904d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/eventlet/db_pool.py:407 
            self._pool.put(self)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #f5b8b7f12c654eec — Filesystem access.
pkgs/python/[email protected]/eventlet/green/http/cookiejar.py:1839 
        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0edefad51a2f250b — Filesystem access.
pkgs/python/[email protected]/eventlet/green/http/cookiejar.py:1931 
        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb5bfd54de6e3f7a — Filesystem access.
pkgs/python/[email protected]/eventlet/green/http/cookiejar.py:2126 
        with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8b4fd22d19ff641 — Filesystem access.
pkgs/python/[email protected]/eventlet/green/http/server.py:738 
            f = open(path, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f661bb1ba504bebd — Environment-variable access.
pkgs/python/[email protected]/eventlet/green/http/server.py:1088 
        env = copy.deepcopy(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b78f9b0973b8b190 — Environment-variable access.
pkgs/python/[email protected]/eventlet/green/socket.py:20 
if os.environ.get("EVENTLET_NO_GREENDNS", '').lower() != 'yes':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b608ff0955bcf071 — Filesystem access.
pkgs/python/[email protected]/eventlet/greenio/py3.py:43 
            with open(name, mode) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8af231a18c39e83 — Environment-variable access.
pkgs/python/[email protected]/eventlet/hubs/__init__.py:66 
        mod = os.environ.get('EVENTLET_HUB', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9bcdcfdfa764680 — Environment-variable access.
pkgs/python/[email protected]/eventlet/patcher.py:492 
    if "PYTEST_CURRENT_TEST" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76c7eaed9ff2fbae — Filesystem access.
pkgs/python/[email protected]/eventlet/patcher.py:745 
    with open(sys.argv[0]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80f8d057b1d125ac — Environment-variable access.
pkgs/python/[email protected]/eventlet/support/greendns.py:94 
if (os.environ.get('EVENTLET_DEPRECATED_EAI_NODATA', '').lower() in ('1', 'y', 'yes')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6793c323471eb0c — Filesystem access.
pkgs/python/[email protected]/eventlet/support/greendns.py:211 
            with open(self.fname, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #943899f32ef6805b — Environment-variable access.
pkgs/python/[email protected]/eventlet/tpool.py:45 
_nthreads = int(os.environ.get('EVENTLET_THREADPOOL_SIZE', 20))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #7cd9a2c7c31abff2 — Filesystem access.
pkgs/python/[email protected]/examples/distributed_websocket_chat.py:97 
        return [open(os.path.join(
                     os.path.dirname(__file__),
                     'websocket_chat.html')).read() % dict(port=port)]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unreachable #6f83af026bbdf790 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/feedscraper.py:12 
    d = feedparser.parse(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #de865c565264f5e3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/producer_consumer.py:26 
        data = urlopen(url).read().decode()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unreachable #478ccd2bd56ffc3e — Filesystem access.
pkgs/python/[email protected]/examples/websocket.py:34 
        return [open(os.path.join(
                     os.path.dirname(__file__),
                     'websocket.html')).read()]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #bfc8cb093b0cfe41 — Filesystem access.
pkgs/python/[email protected]/examples/websocket_chat.py:33 
        return [open(html_path).read() % {'port': PORT}]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fastlogging

python dependency
expand_more 9 low-confidence finding(s)
low env_fs dependency Excluded from app score #2fdf743f096d41c0 — Filesystem access.
pkgs/python/[email protected]/fastlogging/fastlogging.py:173 
                    self.F = open(pathName, "a", encoding=Logger.encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dd737a6e256ff23 — Filesystem access.
pkgs/python/[email protected]/fastlogging/fastlogging.py:334 
            with open(path_join(dirName, dstFileName), "wb") as Z:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82ee73bd0f7afafe — Filesystem access.
pkgs/python/[email protected]/fastlogging/fastlogging.py:335 
                Z.write(Logger.compress[0].compress(open(pathName, "rb").read()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #224b9a0f84464a08 — Filesystem access.
pkgs/python/[email protected]/fastlogging/fastlogging.py:337 
        self.F = open(pathName, "a", encoding=Logger.encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #685af7b22d284e6e — Filesystem access.
pkgs/python/[email protected]/fastlogging/optimize.py:221 
    tree = ast.parse(open(fileName).read())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecfc6b45671ef609 — Filesystem access.
pkgs/python/[email protected]/fastlogging/optimize.py:241 
    with open(os.path.splitext(fileName)[0] + ".pyc", 'wb') as F:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0883192ea5b3aafc — Filesystem access.
pkgs/python/[email protected]/pyorcy.py:34 
    with open(path_out, 'w') as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2e1c27fedfdc94b — Filesystem access.
pkgs/python/[email protected]/pyorcy.py:35 
        for line in open(path_in):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0081997731287e7b — Filesystem access.
pkgs/python/[email protected]/setup.py:102 
with open(os.path.join(BASEDIR, 'README.rst'), encoding='utf-8') as F:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

flask

python dependency
expand_more 21 low-confidence finding(s)
low env_fs dependency Excluded from app score #957adea5870153cd — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:359 
            return open(path, mode)  # pyright: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d01165e467eb7a6f — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:361 
        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56e651f41cad297f — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:381 
            return open(path, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07d5d5ab9d9e058f — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:383 
        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69519b3f004b6667 — Environment-variable access.
pkgs/python/[email protected]/src/flask/app.py:611 
        if os.environ.get("FLASK_RUN_FROM_CLI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d4fbcc9a2aefc45 — Environment-variable access.
pkgs/python/[email protected]/src/flask/app.py:627 
            if "FLASK_DEBUG" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bb8927ed0baa12e — Filesystem access.
pkgs/python/[email protected]/src/flask/blueprints.py:126 
            return open(path, mode)  # pyright: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f757097d92ce9337 — Filesystem access.
pkgs/python/[email protected]/src/flask/blueprints.py:128 
        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75161e154d3d9620 — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:481 
    os.environ["FLASK_DEBUG"] = "1" if value else "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #673243d90c8af7c9 — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:675 
        os.environ["FLASK_RUN_FROM_CLI"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #743f67087c11201a — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:766 
        if key in os.environ or value is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43d24da2fcf63d38 — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:769 
        os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e315478c38e69eb — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:1028 
    startup = os.environ.get("PYTHONSTARTUP")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1150525311f7e85 — Filesystem access.
pkgs/python/[email protected]/src/flask/cli.py:1030 
        with open(startup) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad6c8b51e70ba20f — Environment-variable access.
pkgs/python/[email protected]/src/flask/config.py:114 
        rv = os.environ.get(variable_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4ef43aee071ea04 — Environment-variable access.
pkgs/python/[email protected]/src/flask/config.py:154 
        for key in sorted(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8301fd772c8c3402 — Environment-variable access.
pkgs/python/[email protected]/src/flask/config.py:158 
            value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #029d5da6d00980e6 — Filesystem access.
pkgs/python/[email protected]/src/flask/config.py:208 
            with open(filename, mode="rb") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8fe505729821b65 — Filesystem access.
pkgs/python/[email protected]/src/flask/config.py:293 
            with open(filename, "r" if text else "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7117a47bfc95007 — Environment-variable access.
pkgs/python/[email protected]/src/flask/helpers.py:32 
    val = os.environ.get("FLASK_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #321256e0e71edeb0 — Environment-variable access.
pkgs/python/[email protected]/src/flask/helpers.py:43 
    val = os.environ.get("FLASK_SKIP_DOTENV")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gevent

python dependency
expand_more 996 low-confidence finding(s)
low env_fs dependency Excluded from app score #3d604113264dc48c — Environment-variable access.
pkgs/python/[email protected]/_setupares.py:36 
cflags = _distutils_cflags + ((' ' + os.environ['CFLAGS']) if os.environ.get("CFLAGS") else '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73436621b94fb509 — Environment-variable access.
pkgs/python/[email protected]/_setupares.py:52 
if 'GEVENT_MANYLINUX' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1ca5bdee46690ef — Filesystem access.
pkgs/python/[email protected]/_setupares.py:85 
            with open('configure-output.txt', 'r') as t:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #953e252ff7a9febe — Environment-variable access.
pkgs/python/[email protected]/_setuplibev.py:109 
        if os.environ.get('GEVENTSETUP_EV_VERIFY') is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ad5131ee01b426a — Environment-variable access.
pkgs/python/[email protected]/_setuplibev.py:115 
                ('EV_VERIFY', os.environ['GEVENTSETUP_EV_VERIFY']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb73f1a2facf4871 — Environment-variable access.
pkgs/python/[email protected]/_setuputils.py:30 
RUNNING_ON_TRAVIS = os.environ.get('TRAVIS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c59cf24a937a0bb1 — Environment-variable access.
pkgs/python/[email protected]/_setuputils.py:31 
RUNNING_ON_APPVEYOR = os.environ.get('APPVEYOR')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d992555266667336 — Environment-variable access.
pkgs/python/[email protected]/_setuputils.py:32 
RUNNING_ON_GITHUB_ACTIONS = os.environ.get('GITHUB_ACTIONS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa4a74b3f3476ead — Filesystem access.
pkgs/python/[email protected]/_setuputils.py:52 
    with open(os.path.join(THIS_DIR, *names)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #021fccaeaa696526 — Environment-variable access.
pkgs/python/[email protected]/_setuputils.py:85 
    value = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3537870da01a562c — Environment-variable access.
pkgs/python/[email protected]/_setuputils.py:193 
    env = env or os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #f541c776ed6e2ded — Environment-variable access.
pkgs/python/[email protected]/benchmarks/bench_spawn.py:157 
        ','.join([k for k in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #cdd9b79f722536a7 — Environment-variable access.
pkgs/python/[email protected]/docs/conf.py:20 
os.environ['PURE_PYTHON'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unreachable #2f3582c6852840e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/concurrent_download.py:26 
    data = requests.get(url).text

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #b35b8a96861c3f6b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/psycopg2_pool.py:64 
        self.pool.put(item)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unreachable #521704650c5ac21b — Environment-variable access.
pkgs/python/[email protected]/examples/webchat/application.py:9 
os.environ['DJANGO_SETTINGS_MODULE'] = 'webchat.settings'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unreachable #8a916a26c678d47b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/webproxy.py:84 
            response = urllib2.urlopen(path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unreachable #38e32d5d8b74ff62 — Filesystem access.
pkgs/python/[email protected]/scripts/releases/appveyor-download.py:28 
    with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unreachable #80e09416ae135c0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/scripts/releases/appveyor-download.py:50 
    response = requests.get(url, headers=make_auth_headers())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #f8d44ae2efa52cbd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/scripts/releases/appveyor-download.py:64 
        response = requests.get(url, headers=make_auth_headers())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #40dc30129518fe79 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/scripts/releases/appveyor-download.py:94 
    response = requests.get(url, headers=headers, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unreachable #72ea16689676cd63 — Filesystem access.
pkgs/python/[email protected]/scripts/releases/appveyor-download.py:96 
        with open(filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #fbd9b4f753d87754 — Filesystem access.
pkgs/python/[email protected]/scripts/releases/appveyor-download.py:103 
    with open(filename, 'rb') as fzip:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91f66cf69cd2556c — Environment-variable access.
pkgs/python/[email protected]/setup.py:42 
    if not os.environ.get('PYTHON_EXE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f082d9958424be4a — Environment-variable access.
pkgs/python/[email protected]/setup.py:43 
        os.environ['PYTHON_EXE'] = 'pypy' if PYPY else 'python'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72d0e44051072bc4 — Environment-variable access.
pkgs/python/[email protected]/setup.py:44 
    if not os.environ.get('PYEXE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #817ce912b64de6ab — Environment-variable access.
pkgs/python/[email protected]/setup.py:45 
        os.environ['PYEXE'] = os.environ['PYTHON_EXE']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0a4ff34daccea3c — Environment-variable access.
pkgs/python/[email protected]/setup.py:465 
if os.getenv('READTHEDOCS'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da83c438bb669566 — Environment-variable access.
pkgs/python/[email protected]/setup.py:468 
    new_path = os.environ['PATH'] + os.pathsep + os.path.dirname(sys.executable)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0820d2721c7ba4be — Environment-variable access.
pkgs/python/[email protected]/setup.py:469 
    os.environ['PATH'] = new_path

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30a13f5e99f40f95 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/_compat.py:25 
GLOBAL_PURE_PYTHON = bool(PYPY or os.environ.get('PURE_PYTHON'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d9a6f679793edef — Environment-variable access.
pkgs/python/[email protected]/src/gevent/_compat.py:48 
_GEVENT_PURE_PYTHON = os.environ.get('GEVENT_PURE_PYTHON')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac4d4b2bfc3d52ff — Environment-variable access.
pkgs/python/[email protected]/src/gevent/_config.py:139 
        result = os.environ.get(self.environment_key, self.default)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59e84c8007419c1e — Environment-variable access.
pkgs/python/[email protected]/src/gevent/_ffi/__init__.py:24 
GEVENT_DEBUG_LEVEL = vars()[os.getenv("GEVENT_DEBUG", 'CRITICAL').upper()]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93186c9df7aab910 — Filesystem access.
pkgs/python/[email protected]/src/gevent/_util.py:330 
        with open(path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9f87f9022ce8742 — Filesystem access.
pkgs/python/[email protected]/src/gevent/_util.py:335 
            with open(path, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68dde6c7ba4c4842 — Filesystem access.
pkgs/python/[email protected]/src/gevent/libev/_corecffi_build.py:36 
    with open(os.path.join(thisdir, name), 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dedde8152560b31d — Filesystem access.
pkgs/python/[email protected]/src/gevent/libuv/_corecffi_build.py:41 
    with open(os.path.join(thisdir, name), 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5acd05a77e60b27a — Environment-variable access.
pkgs/python/[email protected]/src/gevent/monkey/__init__.py:286 
    DISABLE_QUEUE_PATCH = os.environ.get('GEVENT_MONKEY_DISABLE_QUEUE_QUEUE', 'false')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d51dbeba0f23531 — Filesystem access.
pkgs/python/[email protected]/src/gevent/resolver/_hostsfile.py:74 
        with open(self.fname, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9305a69fbc2e1e53 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/subprocess.py:1230 
                comspec = os.environ.get("COMSPEC", "cmd.exe")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebec9d824bbe7d6c — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/coveragesite/sitecustomize.py:8 
    if not os.environ.get('GEVENT_TEST_SKIP_COVERAGE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #2c64cf8a54f7cf00 — Filesystem access.
pkgs/python/[email protected]/src/gevent/testing/monkey_test.py:134 
with open(test_filename, encoding='utf-8') as module_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #db25c7dfbf14691c — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/monkey_test.py:148 
remove_file = not os.environ.get('GEVENT_DEBUG')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #642ddc5a0fe4bce0 — Filesystem access.
pkgs/python/[email protected]/src/gevent/testing/openfiles.py:81 
        with open(tmpname) as fobj: # pylint:disable=unspecified-encoding

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e463dd40e6b0c036 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/patched_tests_setup.py:332 
if 'thread' in os.getenv('GEVENT_FILE', ''):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f80e889576af48db — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/resources.py:102 
        resource_str = os.environ.get('GEVENTTEST_USE_RESOURCES')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #007ea99cb27338c1 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:44 
CFFI_BACKEND = PYPY or LIBUV or 'cffi' in os.getenv('GEVENT_LOOP', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1de3779fa0c6948 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:52 
RUN_LEAKCHECKS = os.getenv('GEVENTTEST_LEAKCHECK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc8b13a3609319d2 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:53 
RUN_COVERAGE = os.getenv("COVERAGE_PROCESS_START") or os.getenv("GEVENTTEST_COVERAGE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #148efeace5b2f10a — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:104 
RUNNING_ON_GITHUB_ACTIONS = os.environ.get('GITHUB_ACTIONS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62c2b7da43e5844d — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:105 
RUNNING_ON_TRAVIS = os.environ.get('TRAVIS') or RUNNING_ON_GITHUB_ACTIONS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f0138cb0d4d76ff — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:106 
RUNNING_ON_APPVEYOR = os.environ.get('APPVEYOR')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6c158157dcc2d41 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:109 
RUNNING_ON_MANYLINUX = os.environ.get('GEVENT_MANYLINUX')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b801af88fd380e8 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:112 
RUNNING_ON_MUSLLINUX = 'musllinux' in os.environ.get('GEVENT_MANYLINUX_NAME', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0b2aa280837323f — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:145 
RESOLVER_ARES = os.getenv('GEVENT_RESOLVER') == 'ares'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4837fa2f20022de5 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/sysinfo.py:146 
RESOLVER_DNSPYTHON = os.getenv('GEVENT_RESOLVER') == 'dnspython'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8ec10c15ca07573 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:40 
DEFAULT_NWORKERS = int(os.environ.get('NWORKERS') or max(AVAIL_NWORKERS, 4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #332c6835a5e6a9b8 — Filesystem access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:530 
            with open(abs_filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01448a82de4de146 — Filesystem access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:597 
        with open(_package_relative_filename(filename, package)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37ce0b20dd191cb6 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:725 
        return not bool(os.environ.get(key))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ae607ac2464538d — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:745 
        os.environ['PYTHONWARNINGS'] = ','.join(defaults + [

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d88def6634c37242 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:776 
        os.environ['PYTHONFAULTHANDLER'] = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77d7774ca14b4442 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:779 
        os.environ['GEVENT_DEBUG'] = 'debug'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5dec7370b878d86 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:784 
        os.environ['PYTHONTRACEMALLOC'] = '10'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #335bdbb500164fcb — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:788 
        os.environ['PYTHONDEVMODE'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67b1583a53db3b07 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:796 
        os.environ['PYTHONMALLOC'] = 'debug'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05b705e234d05471 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:799 
        os.environ['PYTHONMALLOC'] = 'default'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6097a46d05da10e4 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:800 
        os.environ['PYTHONDEVMODE'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d608bf0ac27e340 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:803 
    os.environ.pop('PYTHONSAFEPATH', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0b54a4215c6a5ec — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:806 
        k: os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca7014a2ecf43133 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:807 
        for k in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73e3dcabece1572e — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:890 
    os.environ['GEVENTTEST_USE_RESOURCES'] = unparse_resources(options.use)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e87a67cf0e17b2b8 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:898 
    if 'GEVENTTEST_QUIET' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa5826fd2151a1b3 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:899 
        os.environ['GEVENTTEST_QUIET'] = str(options.quiet)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #567e73c2092579f6 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:906 
    if options.coverage or os.environ.get("GEVENTTEST_COVERAGE"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63f44241d689897b — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:911 
            cov_config = os.environ['COVERAGE_PROCESS_START'] = os.path.abspath(".coveragerc")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #894b35e9f9121fbf — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:913 
                cov_config = os.environ['COVERAGE_PROCESS_START'] = os.path.abspath(".coveragerc-pypy")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #626678ebb7fd8bdf — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:918 
            os.environ['PYTHONPATH'] = site_dir + os.pathsep + os.environ.get("PYTHONPATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ec47a83c8ba6528 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:922 
            os.environ['COVERAGE_FILE'] = os.path.abspath(".") + os.sep + ".coverage"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56010448c072d607 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:925 
            print("Enabling coverage to", os.environ['COVERAGE_FILE'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fcf512a927186c3 — Filesystem access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:936 
        with open(options.config) as f: # pylint:disable=unspecified-encoding

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70ca254782492955 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/testrunner.py:965 
            os.environ['PYTHONPATH'] = os.environ.get('PYTHONPATH', "") + os.pathsep + package_dir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a571305da3a27d9 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/util.py:27 
QUIET = validate_bool(os.environ.get('GEVENTTEST_QUIET', '0'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fed33f8770ff972 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/util.py:212 
    env = (env or os.environ).copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9ede5fa35349918 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/util.py:235 
    if not os.environ.get('DO_NOT_SETPGRP'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b15ad80c625cc315 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/util.py:243 
        env = env.copy() if env else os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d53800364e09cb7c — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/util.py:511 
    if 'PYTHONPATH' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f52b5e680f6f5288 — Environment-variable access.
pkgs/python/[email protected]/src/gevent/testing/util.py:514 
    path = os.environ['PYTHONPATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb857c7bd00fdbd9 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_asyncore.py:378 
        with open(os_helper.TESTFN, 'wb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6b41922f25dbcaf — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_asyncore.py:406 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba94e598490b8590 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:777 
        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #00cd09fb66909feb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1558 
        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2b4b900b6effef61 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1695 
        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0fe4edcfeb33f8f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1703 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #79ad0de02382d178 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1714 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d98775dd428897a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1727 
            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #16dccac92756fb85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1746 
                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8d9c328c5e54fa66 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1775 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #91ed7441b005348e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1784 
        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #60e35a10e1c9146f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1795 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c2e62deafcc787a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1808 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2d399f60159388e8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1813 
            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1240ba5eb65f2a93 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1820 
            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=False)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3dbfb7a6af6309f1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1830 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ac3195853096ddd3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1839 
            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1d288c1830e1c2b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1860 
            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #35b764250c2bccdc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1869 
        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ac606077e2d9e27b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1874 
        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #49f67628f9036f65 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1881 
            h = client.HTTPSConnection('localhost', 443, context=context,
                                       cert_file=CERT_localhost)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #f8e90d92dff406d2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1955 
        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad6486bf6476d1f5 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1957 
        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfa33143b66a1613 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1970 
        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e995fbfc43c932f5 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_httplib.py:1972 
        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16720cecd27cc20d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_select.py:32 
        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e8f4c6db72733c5 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:59 
        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7a136f495750792 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:5758 
        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5753b410b1e728e8 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6132 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #915ccc82d1ee4ee6 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6135 
        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f810393c19322f00 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6168 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c56269221823637a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6204 
        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c469ade92c52897d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6206 
        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c54a8208a2edbfc — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6222 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f586d23c8cc7dc43 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6239 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96dbe9e44489bfd7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6260 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33ba496ac6dcbcbe — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6281 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a1fb5a47b4b4996 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6300 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6c584a27f24a418 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6316 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ee96f41c97f6205 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6334 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8413207b09bdf11 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6351 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52147b4cabf524ad — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6356 
        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e809d115ee156860 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_socket.py:6361 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7adb200e4ee65ac — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:168 
        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4626d1426e7443db — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:508 
        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5220a6978fd1feb1 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:1476 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfc140dca8a0344e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:1479 
        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #438a40e3576e4609 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:1647 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04981328532d064d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:1714 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b85b9a1665ffcdf7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:2139 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a430f3fc27291070 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:3575 
        with open(CERTFILE, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #1240487033711773 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:3582 
        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #25dec9d993a68b24 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4365 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e1e92342ad3b132 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4374 
                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29e95d70f60a6cb2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4769 
        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #896d538fef2a534e — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4838 
        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #638bba01684fc87a — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4839 
            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e60f11515819627f — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_ssl.py:4840 
            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cdedcc70cfc6ab7 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:277 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eee8c23f14bbedc5 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:761 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb7647e4f06bbd85 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:814 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c21892f29370e88 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:820 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b780fcccdb115adc — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:826 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #491716da210d3f46 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:832 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9d2f8455f02037e — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:1627 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48fe6642c37dda16 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:1949 
                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #510d9442822ee9b0 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:1996 
                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #704bb8cc660984da — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2048 
                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbdccec3613abbe2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2225 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87033b755eb760f0 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2248 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89943805e986adec — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2258 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c2aa877a434a8b5 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2270 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98c0933d0ae14825 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2634 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bd76c3e83f3640f — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2649 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ead30dfd10c7cde — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2673 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cc1d3c90dc07be2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2970 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f9d0e75a919d8a2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2976 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5eb96280332c6e5f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:2982 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81ce8148042305b1 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:3207 
                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37be835cb09fb703 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:3335 
            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd85120e8b91179c — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:3447 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc010350d985a30f — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:3457 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f9dd2616b1301f8 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_subprocess.py:3468 
            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08995ce125be4484 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.10/test_threading.py:1397 
            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d6a2edec55d2898 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.10/test_wsgiref.py:536 
    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3730bf2f33001673 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:134 
        with open(req_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbcb99e59aa89b2f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:163 
        with open(cert_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05fcd3b21e1eacf0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:165 
        with open(key_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06c31a6266688339 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:179 
    with open(os.path.join('cadir','index.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81dbb5b3d872d363 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:181 
    with open(os.path.join('cadir','crl.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9aa791a7cefee355 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:183 
    with open(os.path.join('cadir','index.txt.attr'),'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62c4ec2b903e4922 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:186 
    with open(os.path.join('cadir','serial'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a105bb77ba92920 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:229 
    with open('ssl_cert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b998c6f86e640107 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:231 
    with open('ssl_key.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9b7c84626202fa0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:237 
    with open('keycert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8aba561a95b5ccbc — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:241 
    with open('keycert.passwd.pem', 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92f0d613ca1d5f88 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:247 
    with open('keycert2.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0b853a73b3bba6b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:252 
    with open('keycert3.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86bc6eb9759fc0bf — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:257 
    with open('keycert4.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #118db9fc121eb3a1 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:264 
    with open('keycertecc.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb884c278c21bad8 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:283 
    with open('allsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbfb1b360af86767 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:300 
    with open('idnsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88ac1b8196372277 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/certdata/make_ssl_certs.py:305 
    with open('nosan.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1f648859749890d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_asyncore.py:377 
        with open(os_helper.TESTFN, 'wb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #635f3e364bd8ad25 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_asyncore.py:405 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab40e44df1fd6b3a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:941 
        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #df96de7df1b5c089 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1734 
        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d03011d0f45d6311 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1871 
        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0eb0a25fa6283fbf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1879 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #08e6cfc8023fa71d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1890 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #de1b5d232a4518d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1903 
            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #addbc79b6be8102c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1922 
                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3f39e44ffa1b174d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1952 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #09b0b10130159924 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1961 
        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3d058497c87ae9bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1972 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f5f32405dfad3611 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1985 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #af94d96aecda2fa0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1990 
            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1285c2bc4469d618 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:1997 
            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=False)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7c6e8c366ac6cea1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2007 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5f63b9e7bffe76cc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2016 
            h = client.HTTPSConnection('localhost', server.port,
                                       context=context, check_hostname=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a2578dcdfc25103a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2037 
            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5525560d5cfab864 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2046 
        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a307a1865d6d7788 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2051 
        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #00cef19ba67eca26 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2058 
            h = client.HTTPSConnection('localhost', 443, context=context,
                                       cert_file=CERT_localhost)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #cd73ea9e317f27e0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2132 
        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ab99b227d8316ac — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2134 
        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a8ee50656b056c2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2147 
        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4aa006c125a58e00 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_httplib.py:2149 
        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #433ab2200e1e639d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_select.py:34 
        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e890f070a3081b6e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:62 
        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56eae91556b70552 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:5817 
        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06173d5880170d0e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6191 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4b0f254a2a5074a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6194 
        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de56b6384523a9d4 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6227 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ca35cd1009d6694 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6263 
        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3293a95dc782cf2e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6265 
        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #beca4e6e9873fa21 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6281 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d10334b876f46713 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6298 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e797ec2cc69de8f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6319 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37e1fe861dafd7fb — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6340 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a7d944c76bbee62 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6359 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #239dd35a28e5af90 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6375 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b6a0a827e5a6541 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6393 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bcab526ac5580cb — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6411 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f30613854ebda27b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6416 
        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ea042426eab25b9 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_socket.py:6421 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8fb183b52a6d7fa — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:168 
        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aaca6c408594ec97 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:518 
        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a956b86f78d643b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:1502 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47efe7453e65cc22 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:1505 
        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d1dddb99ab03053 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:1673 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b60eff7574717417 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:1740 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc2ebcc51d975901 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:2168 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58c9d53f749af851 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:3608 
        with open(__file__, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #ca520eaa6179614f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:3614 
        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #7ebd5061275742cc — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4417 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d7ea86dec93f7cb — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4426 
                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32d933497dad5352 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4821 
        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c49c2f4b29cd243f — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4890 
        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9148e7544f559f1 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4891 
            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f4ea26696dc7ff0 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_ssl.py:4892 
            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebda44a6fd0b1dc5 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:289 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f8b345231d285fc — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:782 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49a4fdf389d8ce34 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:794 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c992dee6c423364 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:868 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d8d326a8b3306b5 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:874 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b3fa90f3126db17 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:880 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28c7b3f7f07052a5 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:886 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ed1001052c5311d — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:899 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fef5d21dd09a9710 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:904 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1607339bcf492a29 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:1728 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34577b4ba54c1962 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2067 
                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #165e90dea9342826 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2114 
                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #169ee3969c10966b — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2167 
                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a20f85695c52263 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2344 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67abf6ebda63d96f — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2367 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #865c7561be5f907f — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2377 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #118a00a2e1269fc1 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2389 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a4ff3838c175f06 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2753 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e288e1807e46d382 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2768 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78f056faf007201e — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:2792 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57a8ed429d544af4 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3089 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #730bee245cded0b1 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3095 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a330e38dd1193223 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3101 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4479ceec6a44b29f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3326 
                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dd02913fca0ff0f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3455 
            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #300940a5d267e49b — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3567 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1f38f7623d4c596 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3577 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f141622c4eb8d85 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_subprocess.py:3588 
            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63bc7d5571241acc — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.11/test_threading.py:1513 
            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #105f8431dfda551e — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.11/test_wsgiref.py:512 
    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2808db6cd6381946 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:134 
        with open(req_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53907eca4d90864b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:163 
        with open(cert_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32078c390dce7cd5 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:165 
        with open(key_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d58f7e24c0b1752 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:179 
    with open(os.path.join('cadir','index.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddac532592a6d73c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:181 
    with open(os.path.join('cadir','crl.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46acad056a38d475 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:183 
    with open(os.path.join('cadir','index.txt.attr'),'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51bfe1bf0e4da71c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:186 
    with open(os.path.join('cadir','serial'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6777ee5300479145 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:229 
    with open('ssl_cert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a173a7e3b7617a19 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:231 
    with open('ssl_key.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #838562e86b7125e4 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:237 
    with open('keycert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e0a408edde497ea — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:241 
    with open('keycert.passwd.pem', 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e96b88ae259a556 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:247 
    with open('keycert2.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41d21c7ef8266aa0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:252 
    with open('keycert3.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e67fb7ed20af658d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:257 
    with open('keycert4.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e77f9c5bcef97723 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:264 
    with open('keycertecc.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ebc900bdeeb4997 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:283 
    with open('allsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21a4c7e3e81605b3 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:300 
    with open('idnsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22c3c872b84a8e49 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/certdata/make_ssl_certs.py:305 
    with open('nosan.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ed19f723b488935 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:984 
        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #98007d3e8372899d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1796 
        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6d9c4034a2b509fb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1933 
        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e14ca9c90f38cdb7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1941 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #39673c1d1361b3d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1952 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b6217317cf9a03ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1965 
            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f607b073deb7fc06 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:1984 
                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #afa29c5451543343 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2014 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2db379a4c0265824 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2023 
        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #eb55294e00e46cda — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2034 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cc7a74f72640d6bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2047 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #323054f1017124c5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2053 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #39603f2147afc89a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2059 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #69ecde92d5a7d887 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2082 
            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #51aa18b50be6aef1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2091 
        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #08428bdebb479f9c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2096 
        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #89d5554e59f8e21d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2102 
        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #b362bdc2a04f3486 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2175 
        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16cc8b52138b40f3 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2177 
        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6260f4dd97c93f05 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2190 
        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #359da49615022a39 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_httplib.py:2192 
        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #372a8a6603756e96 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_interpreters.py:29 
    return wrapped, open(r, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89f6c2d50c5369c0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_interpreters.py:64 
    with open(w, 'w') as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43d79c44e78edd9a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_interpreters.py:669 
        with open(filename, 'w', encoding='utf-8') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae299d716b7123bb — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_select.py:33 
        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f19ba183a24c3103 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:63 
        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #815599b17886fff6 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:5966 
        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1fc9142ea7c35d0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6340 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #499eac58bb11ae3c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6343 
        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5675a914b8bdb96 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6376 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0933da8a15fed34e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6412 
        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4619c2735708a404 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6414 
        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #462c42d19f1dc85f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6430 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1681b9410a1c8155 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6447 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cfe0f81b911539c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6468 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0174092da6419e4d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6489 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81c87f37960f679a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6508 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7306915a63bd213d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6524 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9469d6062c82cf34 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6542 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e2e65c5394f5018 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6560 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a3605e1820a1235 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6565 
        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d78b16f37d2b489e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_socket.py:6570 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee90d664f65d09a5 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:165 
        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d5052fcd804b39b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:506 
        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbf71bfe5720bb75 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:1267 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #927b9eb5d84a3455 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:1270 
        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b13a462d3ba6b8c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:1444 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b147446e2fa1974c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:1514 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44dfe12993f5b377 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:1960 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b522231fe5a9f5e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:3392 
        with open(__file__, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #dec8ae3425841eab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:3398 
        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #2c2d156e809e6509 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4229 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec30fbe0f9143ff1 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4238 
                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e4f1fa4f613eb54 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4633 
        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc8cffd0106265bc — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4710 
        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #945a9804e8fd5f34 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4711 
            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9553c8407d4acf0 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_ssl.py:4712 
            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a2faa1069d4c7e4 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:281 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41f56ee212d3bbdd — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:775 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f346beeba8f7e21 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:787 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7047ee6a1e6ceea7 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:861 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96acbeccb0731dad — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:867 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84bcfef381de910f — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:873 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f167763819a1894 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:879 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #947184068b00f87a — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:892 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ca90f96bf854841 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:897 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e4c16569fb3e8b8 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:1710 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3937a715b5234dd — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2049 
                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a197d311962a5863 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2096 
                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a3f4552a21da734 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2155 
                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15d7931cffa3cd59 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2322 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a13d14a7ca3433b — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2345 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f0b291980818b05 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2355 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1f51509b3b5b954 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2367 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72335d58ab4e58e4 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2731 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd6dc4cbf75593be — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2746 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #475c4209de47f2f0 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:2770 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e24eaff5a4638c23 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3067 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0213ed045e06402 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3073 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #602f60be748ac67b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3079 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e356910bda08c7d4 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3304 
                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f15105f4b0f5afd8 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3452 
            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12b384abb2f16891 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3564 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3d286d79c84b95b — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3574 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d28e1212283f2e1 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_subprocess.py:3585 
            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30cd62c50bf07206 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_threading.py:1783 
            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d031ddba86d4e20f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.12/test_threading.py:1993 
            with open(filename, 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d5145b76322da31 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.12/test_wsgiref.py:512 
    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b113e5b8d2531af — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:135 
        with open(req_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #699155cf1d2b0549 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:164 
        with open(cert_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a00d08c3f916cb6 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:166 
        with open(key_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e84e04956e50dd6e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:180 
    with open(os.path.join('cadir','index.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e2d26030739cde9 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:182 
    with open(os.path.join('cadir','crl.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a00da62ddd901515 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:184 
    with open(os.path.join('cadir','index.txt.attr'),'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #937415ebd9a580df — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:187 
    with open(os.path.join('cadir','serial'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd445a3ba9d1ab67 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:230 
    with open('ssl_cert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71c382cc78b98cfa — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:232 
    with open('ssl_key.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9558cc5ac9e8068 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:238 
    with open('keycert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74723153acd3ad34 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:242 
    with open('keycert.passwd.pem', 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5b68065678f543c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:248 
    with open('keycert2.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fe88fd2bc84b20b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:253 
    with open('keycert3.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33413c0c5448eb7f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:260 
    with open('keycert4.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ac04d81f80b0aef — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:267 
    with open('keycertecc.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35d12b4527d90ecd — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:286 
    with open('allsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #111b85729cf66611 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:303 
    with open('idnsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fd36ba06ea0e448 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/certdata/make_ssl_certs.py:308 
    with open('nosan.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbebe9df17b03681 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:988 
        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #0462d8e899e04a28 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1803 
        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #003d819360957bb2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1940 
        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d80fdc5d5dc2000f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1948 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #adafb01661fb2655 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1959 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #28ad6ad976812e0e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1972 
            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e3a358e80fdc8fd2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:1991 
                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b4348921b7cb3cf0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2021 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e430b507a029fdd0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2030 
        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cbdf1b962148496b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2041 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7e1b30ae1e6043d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2054 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1f18061238bdc2ff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2060 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b813956582c485f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2066 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c2f7c6191b01e24a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2089 
            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8011dfec4464c2bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2098 
        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f0931b10dda3b235 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2103 
        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5f2121ca4d120331 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2109 
        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #635a39861989eda4 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2182 
        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a69372c34ad4dc2e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2184 
        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1c4a3e4fe5ecadb — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2197 
        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5564d6091706b012 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_httplib.py:2199 
        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d4a6260e98e1166 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_interpreters.py:29 
    return wrapped, open(r, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88fa5a906ff53146 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_interpreters.py:64 
    with open(w, 'w') as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #705f4a111bc1a907 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_interpreters.py:669 
        with open(filename, 'w', encoding='utf-8') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c659949400b9f48 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_select.py:33 
        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb700b5e06298786 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:97 
        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10a0ca1d0bc5ad4e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6210 
        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff98c2cbf28c1d74 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6584 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22f45b3414ee5403 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6587 
        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b1d2c079d4de1ea — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6620 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18723bf6365f0ca7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6656 
        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #934eedc40befa168 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6658 
        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74d0d8ebcdab0717 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6674 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a75aa4ad9e9a0692 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6691 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da8499fff9bb3706 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6712 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8c420783cd16560 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6733 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea6c9cb3a9dfe644 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6752 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfbf3412f577220c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6768 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8842476b39d7354b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6786 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7156751dae661d2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6804 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78ef74ce0489a50f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6809 
        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39fceb18f6b39eef — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_socket.py:6814 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e68dc6278ede3b6 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:176 
        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e935b2ded937c1be — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:529 
        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efdf715599f7d5e8 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:1290 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10f3da3c9d29c910 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:1293 
        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65349f82206aa0be — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:1467 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c44fcfd09b36e15 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:1541 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7cdba3a139d29282 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:1987 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55e37b9140f53fc7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:3510 
        with open(__file__, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #a8eb0d9972b7cd68 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:3516 
        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #15684c30dd3f6c65 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4347 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c7c5967ba98bcd8 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4356 
                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1b2c7f3b25f58fc — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4834 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba06c6dc06e3f3ec — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4837 
        with open(SINGED_CERTFILE_ONLY) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd34349508130480 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4890 
        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60fe32083d354f86 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4967 
        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c7069843ba75182 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4968 
            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64935a5dd514d38d — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_ssl.py:4969 
            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fdf0c4c72916a3a — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:299 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a89be055f13963b — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:793 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4672674d41b2faa — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:805 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99accf152d8f1854 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:879 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9682649f81b7723c — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:885 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2dd4a3c58df90dd0 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:891 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54702dc9c88579e6 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:897 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4e3141508df02fc — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:910 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d87a3d0718991603 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:915 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a12dd8e19c7979e9 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:1725 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20a3d29290b2a143 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2071 
                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cce328a388435661 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2118 
                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca65881928955356 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2177 
                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5c679662ff92cf7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2344 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8697c674dea4dc16 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2367 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbbe421f3da4d687 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2377 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa7beb38c59bdc93 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2389 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #adbca2a89b0275c8 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2753 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b877be5c896dcc9 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2768 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4600fd6f2a7f9875 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:2792 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bda81ec8454ce49f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3089 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a36679dfda0dc8e9 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3095 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c09d53dc4b9358a1 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3101 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d00c31af0257a9f8 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3326 
                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e13bde2120120d13 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3562 
            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0e208eacf426c45 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3674 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a05c4a7ec648a199 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3684 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1a0f4d14f1afe28 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_subprocess.py:3695 
            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32dba0013436eb9e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.13/test_threading.py:1839 
            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f54e4e15aa4297a6 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.13/test_wsgiref.py:512 
    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5c6de294d3b6b27 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:138 
        with open(req_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d484f5d40feb45a4 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:166 
        with open(cert_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6e3e9f1de9d4475 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:168 
        with open(key_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cca5040f8de71f3 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:182 
    with open(os.path.join('cadir','index.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba394ab77d6d0fd0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:184 
    with open(os.path.join('cadir','crl.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8782347e33ee2fe — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:186 
    with open(os.path.join('cadir','index.txt.attr'),'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8d379759c7977ab — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:189 
    with open(os.path.join('cadir','serial'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eaf62ecdfe57e3e9 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:229 
    with open(path + '.reference', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #050075f13db42c62 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:241 
    with open('ssl_cert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f1da7fa97f9df4b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:243 
    with open('ssl_key.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fe8d300c4c2d061 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:249 
    with open('keycert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edd4e2cc987289ee — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:253 
    with open('keycert.passwd.pem', 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8082e8268f215a70 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:259 
    with open('keycert2.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4118f624a5857ac — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:264 
    with open('keycert3.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f94d4a5c45f749a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:271 
    with open('keycert4.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3f0f5774170707a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:278 
    with open('keycertecc.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c15732b13f8bfc55 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:297 
    with open('allsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35f70fb3e0808a35 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:314 
    with open('idnsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8acfe969687ac69 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/certdata/make_ssl_certs.py:319 
    with open('nosan.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26f4810bf5ebba13 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:30 
    return wrapped, open(r, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e891707af1b3258a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:69 
    with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a62ed78f499ed7db — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:708 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edc85ff4332e52d3 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:740 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb05e7e6da4e09c0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:762 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecc6480838f70adb — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:779 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3a56877a1519b60 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:792 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #babf382bc7f63510 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:813 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #632b1fb3a79abb14 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1021 
            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de1e59ce0912462c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1027 
        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31475e81030bd912 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1037 
            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49c837c7768f1861 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1054 
        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f7cec6b0b35ed2c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1065 
            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c16556ace1c26e18 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test__interpreters.py:1072 
        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d79ca1e4b45770ed — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:998 
        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #8827be88aa2a4ab8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:1813 
        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d36fc40e4f43af46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:1950 
        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #939156137a7b3e8c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:1958 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cf815d26d22f9b75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:1969 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3d00081cc0354456 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:1982 
            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e6b4d342a6140c84 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2001 
                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1c40d629a32fb6a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2031 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4db0ed772cd87b1d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2040 
        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b882440abc72954e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2051 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #21ede5ac8d009797 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2064 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d3347fd3ba8a7005 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2070 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #85add28c4294845a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2076 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f92bc479a09255f1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2099 
            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ca97e6382b698c6a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2108 
        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1ba8d7437ad6447a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2113 
        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #66f389251ee05fa8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2119 
        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #e751c6f9cd1e06a8 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2192 
        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83de58be77a47bf0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2194 
        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27e5ea1f2618a601 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2207 
        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e67da6c0eade584e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httplib.py:2209 
        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20824ae9d604c477 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:116 
        os.environ = os_helper.EnvironmentVarGuard()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12f48579075bea3c — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:125 
        os.environ.__exit__()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #21c09ada9cfc42bd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:130 
        self.connection.request(method, uri, body, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3465ee8d31f53c09 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:388 
        self.connection = http.client.HTTPSConnection(
            self.HOST, self.PORT, context=context
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4d8c1fe45bc48ed3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:391 
        self.connection.request(method, uri, body, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #05fea736d904eb30 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:479 
        with open(tempname, 'wb') as temp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc5b7c970ca50aad — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:547 
            with open(fullpath, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #945d0ce0779aa46a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:725 
        with open(os.path.join(self.tempdir_name, 'index.html'), 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14909093d9f5ef89 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:936 
        with open(self.nocgi_path, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87a88b4521d23d9c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:941 
        with open(self.file1_path, 'w', encoding='utf-8') as file1:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4eed456b275c5a2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:946 
        with open(self.file2_path, 'w', encoding='utf-8') as file2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a00b51c8f773a763 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:951 
        with open(self.file3_path, 'w', encoding='utf-8') as file3:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f74d786c7b837891 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:956 
        with open(self.file4_path, 'w', encoding='utf-8') as file4:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0818550cbd341ed — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:961 
        with open(self.file5_path, 'w', encoding='utf-8') as file5:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1eda94d652ebfaa5 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:966 
        with open(self.file6_path, 'w', encoding='utf-8') as file6:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57b448446277969f — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:1086 
        os.environ['SERVER_SOFTWARE'] = signature

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69633166cafa458f — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_httpservers.py:1091 
        self.assertEqual(os.environ['SERVER_SOFTWARE'], signature)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b9007b345cfebd0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_select.py:33 
        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02211289a2bdde56 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:97 
        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9aadea7551e8665a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6331 
        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e82b132f6b29bed0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6705 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bec8759042c443b7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6708 
        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e0a511a59eec90f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6741 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #968906d662f20f24 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6777 
        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21ece30c84797270 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6779 
        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34e818c317966ff0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6795 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7769ecdf067dcd6 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6812 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c732ee0c0ff17026 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6833 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92b9f7dec9625f09 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6854 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #649370a415de6a53 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6873 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b6493f2a19cf257 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6889 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56824859a729a83a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6907 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc1220ff6f0938ca — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6925 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c6cf7c5e83ef41c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6930 
        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e29019d4941e829d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socket.py:6935 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34232634d09046c9 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socketserver.py:328 
        with open(os_helper.TESTFN) as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa4ad64340002d17 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socketserver.py:346 
        with open(os_helper.TESTFN, 'a') as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c11643e4039fd5d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_socketserver.py:355 
        with open(os_helper.TESTFN, 'a') as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c463c8ded587588 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:88 
with open(data_file('keycert.pem.reference')) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e8335876703d5c5 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:99 
with open(data_file('keycert3.pem.reference')) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6be93e0cbc5dadd3 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:148 
        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60fad85f30fdd5ff — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:502 
        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23e474a9624a14e5 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:1263 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5f3a0b697d02e99 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:1266 
        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #986b9c52a78094bf — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:1439 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4cd602fcef1a9c6 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:1513 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79bd962e087c4d5f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:1959 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9f373371a85839a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:3483 
        with open(__file__, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #21c789e5c5b6d801 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:3489 
        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #17b68c8f17290cc9 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4320 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ef6b28a4e566be2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4329 
                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b45311aaa53ba880 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4808 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e14589197f0eba2a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4811 
        with open(SINGED_CERTFILE_ONLY) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e9fc68c08919c47 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4864 
        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c2d90f593bf339c — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4941 
        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a67b43495aab2aa — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4942 
            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab797530f81f00b5 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_ssl.py:4943 
            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbc812b830937f2e — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:300 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b03fc843fc1c4e69 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:794 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e5bb8f92880f1eb — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:806 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #063fd1aeca0b4fad — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:880 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b16d1a519cd3413a — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:886 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48001b7427cf63c1 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:892 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c564ecd96ad6cbf — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:898 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14ac2557437b097c — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:911 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5600e58a88f8292d — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:916 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef4f7dd63ac0ba02 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:1726 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9dae7f518e8e7a40 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2072 
                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9af70697d5237526 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2119 
                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8aaf594a1e45dd82 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2178 
                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc0828e51b069762 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2345 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e82c093f6714ad26 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2368 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #006f29279c36688d — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2378 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d721c6c4c6926710 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2390 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66a59761a80eb42c — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2754 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a81927ef06e88296 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2769 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15cb6c91fb21e02c — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:2793 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9f9d7309645a77e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3090 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #028248711a14bb3b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3096 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1f7f42a9aafc622 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3102 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7c13842818e6cd3 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3327 
                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d06a9f673da1b201 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3531 
            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c702a6aef26ed734 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3643 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f5d2c0c4ded9edb — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3653 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5f31c9b54feb098 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_subprocess.py:3664 
            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ea791abbc4b7e71 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_threading.py:1983 
            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e4271853d2a87c4 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:106 
        f = open(os_helper.TESTFN, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #3f3890ff2c03a878 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:113 
        self.returned_obj = urllib.request.urlopen("file:%s" % self.quoted_pathname)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #0eac14cdde92a68d — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:201 
        for k in list(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #520440393a46e638 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:270 
        self._saved_env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1969b48cfe2a0b20 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:272 
        os.environ = collections.OrderedDict()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab5b73b1e83f2db5 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:275 
        os.environ = self._saved_env

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20f397475ad267cd — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:279 
        os.environ['no_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #529daacf44d73f67 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:280 
        os.environ['No_Proxy'] = 'localhost'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0d10db979c82d43 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:283 
        os.environ['http_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71b41dfa0643d719 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:284 
        os.environ['HTTP_PROXY'] = 'http://somewhere:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f1e7bd5125354d8 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:288 
        os.environ['no_proxy'] = 'localhost, noproxy.com, my.proxy:1234'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6ef0d3457ac4d08 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:289 
        os.environ['No_Proxy'] = 'xyz.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40a389ce7afa76b0 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:296 
        os.environ['http_proxy'] = 'http://somewhere:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37976d3bbbb010fc — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:297 
        os.environ['Http_Proxy'] = 'http://somewhereelse:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #e008fb0630d0cd68 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:308 
            fp = urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6140591b41d74c30 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:321 
            fp = urllib.request.urlopen(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #28f2bf5bc7ca6aad — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:329 
            resp = urllib.request.urlopen("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #331376496f722c9d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:351 
                    urllib.request.urlopen(f"http:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #52d5b699e58ca3b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:354 
                    urllib.request.urlopen(f"https:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8268cab1b42b9dcd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:390 
                    urllib.request.urlopen(f"http:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fbd152b58c587c3c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:392 
                    urllib.request.urlopen(f"https:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5597116bddcb7dc8 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:432 
                urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8226f496a9578492 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:449 
                urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #236acc787042875a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:464 
                    urllib.request.urlopen("http://something")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fc9bfbe29a4082d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:492 
            with urllib.request.urlopen(tmp_fileurl) as fobj:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b1592768900d7450 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:500 
            urllib.request.urlopen(tmp_fileurl)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #38773dc50aaafb61 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:546 
            urllib.request.urlopen(self.text_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #68fe47549232a5be — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:548 
            urllib.request.urlopen(self.text_url_base64))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #89c6b8d9e765a3d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:549 
        self.image_url_resp = self.enterContext(urllib.request.urlopen(self.image_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #09f2603ef80ab5cf — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:614 
            FILE = open(os_helper.TESTFN, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e25ec6a1b78c11f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib.py:668 
        FILE = open(second_temp, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #6c53556044d0128b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:68 
        with urllib.request.urlopen(file_url) as f:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bd0110ad4ce00221 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:103 
        self.assertEqual(Request(url,
                                 headers={"Spam-eggs": "blah"}
                                 ).headers["Spam-eggs"], "blah")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2f61e5643c2ce1da — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:106 
        self.assertEqual(Request(url,
                                 headers={"spam-EggS": "blah"}
                                 ).headers["Spam-eggs"], "blah")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #00153a671b89d644 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:126 
        req = Request(url, headers={"Spam-eggs": "blah"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bbc1881e732f5fa8 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:420 
            return Request("http://blah/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1a19edee80c929cc — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:612 
        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d0edece3df52f7de — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:654 
        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d905a0349b5313b5 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:670 
        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ac553b276324e8b4 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:692 
        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #f127a12b43d2ff0a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:829 
            f = open(TESTFN, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dfdcbcf2d163b56 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:863 
                f = open(TESTFN, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #c3488ccb96cf74bb — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:935 
        req = Request("http://example.com/","badpost")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #68a7f830e1963dd5 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:941 
            req = Request("http://example.com/", data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #dcb61ec653b1e323 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:978 
        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #e8cfb86e9478ad1b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:979 
            req = Request("http://example.com/", f, {})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #98c3405ac9919670 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:985 
        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #664cf519d9c7a197 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:986 
            req = Request("http://example.com/", f, {"Content-Length": 30})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f74b51cef7706052 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1001 
        req = Request("http://example.com/", file_obj, {})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #892a1fd6af64a1a5 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1007 
        req = Request("http://example.com/", file_obj, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #68434b9c5aa16e5b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1027 
                req = Request("http://example.com/", proc.stdout, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #564c436512cee06c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1048 
            req = Request("http://example.com/", iterable_body(), headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #49d22793ae2d686f — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1061 
        req = h.do_request_(Request("http://example.com/", ()))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c088c2f79fa08895 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1074 
            req = Request("http://example.com/", iterable_array, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7da3e1efdaace379 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1149 
        r = Request('http://example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d3ced9b79114e645 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1161 
        r = Request('http://www.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #333405cbfc599a7d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1175 
        req = Request(weird_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #369a8de0461904e6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1181 
        req = Request(url_without_path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #debf0344a015351a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1191 
        req = Request(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c25a4fbbc9251a4a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1216 
        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7f8b584ced3347cc — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1312 
        req = Request(from_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #87ac1dd43a801f53 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1334 
        req = Request(from_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8a08ad030070d4f5 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1383 
        fp = urllib.request.urlopen("http://python.org/path")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3c3bbbb0ca7e86a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1416 
                response = opener.open('http://example.com/')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #82428f96aae84f0d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1425 
        req = Request(from_url, method="HEAD")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c0cb2818dec0a7f4 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1441 
            req = Request("http://acme.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #96e5b206530b031c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1454 
        req = Request("http://www.perl.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cd08ea295786ecea — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1458 
        req = Request("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fb368db4f2e2d6ce — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1469 
        req = Request("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #29679645e765959d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1483 
        req = Request("https://www.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b8f0590a7a2d0899 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1497 
        req = Request("https://www.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8e0c49a5df899b79 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1731 
        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a417bade6e66d0c0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1751 
        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #23a74cb523ec1adf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1777 
        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6602070acc654ad1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1803 
        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b4b32797343c3d81 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1817 
        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cdfe7948acd8a5da — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1832 
            req = Request("http://dummy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a5c4f0fdd8c5e219 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:1843 
        req = Request("http://dummy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #70a65a53a956d53e — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2013 
        self.get = Request("http://www.python.org/~jeremy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #552f78e42351eb83 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2014 
        self.post = Request("http://www.python.org/~jeremy/",
                            "data",
                            headers={"X-Test": "test"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f99390b54da730b5 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2017 
        self.head = Request("http://www.python.org/~jeremy/", method='HEAD')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #904b463e8962ded6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2061 
        req = Request("http://www.python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ad6f1d9d4764908b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2071 
        req = Request("http://www.%70ython.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6d4396e3b4d85b49 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2086 
        req = Request("http://www.python.org/?qs=query#fragment=true")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3857b58406df9ee8 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2088 
        req = Request("http://www.python.org/#fun=true")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #05a8736bd296f075 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2.py:2093 
        req = Request(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e80f5ca15559c505 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:311 
            self.assertTrue(urllib.request.urlopen(self.server_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2830a326710d2542 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:320 
            urllib.request.urlopen(self.server_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #363314e1f866cf66 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:336 
            os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1279dbcd37454d11 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:337 
            os.environ.update(old_environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5185913ba3b2be1 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:338 
        self.addCleanup(restore_environ, os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b93b349b7f884e5 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:339 
        os.environ['NO_PROXY'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6fb106232f8198b — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:340 
        os.environ['no_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #d3f2ca5872f5a120 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:368 
            self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b48409f79b76b3a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:374 
            self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0d489ad1a83b9f46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:381 
        with self.opener.open(self.URL) as result:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #189be0f14fe5a236 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:390 
            result = self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #bd258ef675780a73 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:462 
            os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ed458df7580e3c8 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:463 
            os.environ.update(old_environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9733b8b2dc2ec731 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:464 
        self.addCleanup(restore_environ, os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #060a4be0e6e03357 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:465 
        os.environ['NO_PROXY'] = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ede7a31cee3879cb — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:466 
        os.environ['no_proxy'] = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #c5bf4e64639b4004 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:470 
        f = urllib.request.urlopen(url, data, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #eca1cae15e45a301 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:592 
        with urllib.request.urlopen(req):

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #55e5d825bd960112 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:600 
        with urllib.request.urlopen(req):

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #398bb759a6b130c5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:607 
        with urllib.request.urlopen("http://localhost:%s" % handler.port) as open_url:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9386661cef998e6c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:614 
        open_url = urllib.request.urlopen(
            "http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b336a9b88990129d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:626 
        open_url = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #20f4ce398be42668 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:634 
        data = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f15e4ea125f7c627 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:642 
        data = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1d533379b5b882b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:661 
        opener.open(request, "1".encode("us-ascii"))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b37996087376e8f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.14/test_urllib2_localnet.py:665 
        opener.open(request, "1234567890".encode("us-ascii"))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #57b053c9ec5f0b6f — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.14/test_wsgiref.py:512 
    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62277162b3983efe — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:138 
        with open(req_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #864b6457e780ceeb — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:166 
        with open(cert_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae1c2a6984c9cec7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:168 
        with open(key_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aff63d168b3701cc — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:182 
    with open(os.path.join('cadir','index.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f7dccda6834212a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:184 
    with open(os.path.join('cadir','crl.txt'),'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dd6257060a7b429 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:186 
    with open(os.path.join('cadir','index.txt.attr'),'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35a4875f710edc38 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:189 
    with open(os.path.join('cadir','serial'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3b1ff7136a30ebc — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:229 
    with open(path + '.reference', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ceadd4b78b1696e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:241 
    with open('ssl_cert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc8a7bce1309f083 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:243 
    with open('ssl_key.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b3a5f81b1d49180 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:249 
    with open('keycert.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c927b3d8835eda3 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:253 
    with open('keycert.passwd.pem', 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1630ea011cb1a2e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:259 
    with open('keycert2.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3de8a2a3f8a8231 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:264 
    with open('keycert3.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #036ee3d1f11af722 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:271 
    with open('keycert4.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54c0713eadebeabf — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:278 
    with open('keycertecc.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f159f8e76540c338 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:297 
    with open('allsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #308a44d9e4124c23 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:314 
    with open('idnsans.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a136da208b13aed8 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/certdata/make_ssl_certs.py:319 
    with open('nosan.pem', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b6b4fe500cb1757 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:30 
    return wrapped, open(r, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81d6bf2b2ff4eed9 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:69 
    with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26ba822e47416b7a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:708 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd8eb61b7c927b97 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:740 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97835bc2ab4362ac — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:762 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef98d42633cad174 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:779 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9bef6695c718d53b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:792 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc54c46cb1f51bce — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:813 
        with open(r, 'rb') as chan:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76e20ff4bfff1b65 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1021 
            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6e13539aefa9ac8 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1027 
        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fef71576b18c5ed7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1037 
            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8a95228fb060aa2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1054 
        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22a26a6f0203b0c1 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1065 
            with open(w, 'w', encoding="utf-8") as spipe:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2d5effadb6d0ebe — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test__interpreters.py:1072 
        with open(r, encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c54c497f31b4e64 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:1089 
        with open(__file__, 'rb') as body:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #d116473c80acda19 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:1970 
        self.conn = client.HTTPSConnection(HOST, self.port,
                source_address=('', self.source_port))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6b5c2453d4b7ab08 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2107 
        h = client.HTTPSConnection(HOST, TimeoutTest.PORT, timeout=30)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f515d2da6e0eb638 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2115 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8c0f51770d50a3fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2126 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443,
                                       context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #da09fb254f7655f0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2139 
            h = client.HTTPSConnection('www.python.org', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #47b2b97967c50d37 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2158 
                h = client.HTTPSConnection(selfsigned_pythontestdotnet, 443,
                                           context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3ed0955a898b5806 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2188 
            h = client.HTTPSConnection('self-signed.pythontest.net', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #335ec399aa6240cf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2197 
        h = client.HTTPSConnection('localhost', server.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #41dd4978fccb6680 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2208 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9f5a15aa757f2642 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2221 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5dfded979218de69 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2227 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2b29da05a3e10d1f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2233 
        h = client.HTTPSConnection('localhost', server.port, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3cafd5da6c483fa2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2256 
            c = client.HTTPSConnection(hp)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8fb4ea143ca3bc2d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2265 
        h = client.HTTPSConnection('localhost', 443)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d8290049e1addb66 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2270 
        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0232ee06b8aa3aad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2276 
        h = client.HTTPSConnection('localhost', 443, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #67e077fee86cd475 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2349 
        with open(os_helper.TESTFN, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e358841acf6e6c1 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2351 
        with open(os_helper.TESTFN, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59dd95e2ee2131c0 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2364 
        with open(os_helper.TESTFN, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #952e0b60791455c4 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httplib.py:2366 
        with open(os_helper.TESTFN, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f78c3fde6fa8696c — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:121 
        os.environ = os_helper.EnvironmentVarGuard()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88e017b2ac5563b6 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:130 
        os.environ.__exit__()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #4947f57f826af669 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:135 
        self.connection.request(method, uri, body, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #673bacd6f2eb3cad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:431 
        self.connection = http.client.HTTPSConnection(
            self.HOST, self.PORT, context=context
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f18c36e28d494a5d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:434 
        self.connection.request(method, uri, body, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #4f19dd11a03b2bc2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:565 
        with open(tempname, 'wb') as temp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8feb63b790b7aaa — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:642 
            with open(fullpath, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae0713b46d00e9d7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:820 
        with open(os.path.join(self.tempdir_name, 'index.html'), 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5542eb14a643c36b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:936 
            with open(os.path.join(self.tempdir_name, 'index.html'), 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d9fec2e396bc37b — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:1469 
        with open(self.tls_password_file, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a55f02da7616af97 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:1674 
        with open(self.served_filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e250c18a5ad575f3 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:1676 
        with open(self.tls_password_file, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #60b0258bcb490ac7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_httpservers.py:1681 
        with urllib.request.urlopen(req, context=context) as res:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #4de08883f20e8671 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_select.py:33 
        with open(__file__, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0e6f0d297428681 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:100 
        with open("/dev/vsock", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6afa2837a59aadce — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6458 
        f = open("/proc/modules", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50be79e1ce66bddf — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6832 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a3d5baa7ba051ae — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6835 
        with open(os_helper.TESTFN, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0192079c9531f468 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6868 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0063952792f5766 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6904 
        with open(filename, 'wb'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c6a803dd04090cc — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6906 
        file = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ebf9f7b0f44aecf — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6922 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09534d16a53e7859 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6939 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2947a67e5ebf9e03 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6960 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49b9c32f2ff4b3d7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:6981 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45bbfd18b3135a5a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7000 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18256be09dede7ec — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7016 
        file = open(os_helper.TESTFN, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0dc0cfb1e117ae6c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7034 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #233216b4d78ffeb2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7052 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f64731e3ccf2ca8c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7057 
        with open(os_helper.TESTFN, encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7be73e30f8ab017a — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socket.py:7062 
        with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11757d4783eb2696 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socketserver.py:340 
        with open(os_helper.TESTFN) as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b463672883839f6 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socketserver.py:358 
        with open(os_helper.TESTFN, 'a') as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b33e9f48c3704587 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_socketserver.py:367 
        with open(os_helper.TESTFN, 'a') as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33987002fe0bcdb7 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:107 
with open(data_file('keycert.pem.reference')) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc0f35e332d81600 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:118 
with open(data_file('keycert3.pem.reference')) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d87e0feb463571c4 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:168 
        with open("/etc/os-release", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74ade4ea0a5fb880 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:584 
        with open(CAFILE_CACERT, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73fc934634414a99 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:1427 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c38abb9c8c47d9c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:1430 
        with open(CAFILE_NEURONIO) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c6931cd9e6e97cf — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:1646 
        with open(CAFILE_CACERT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5549802677483d1 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:1720 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b86634564db8963 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:2200 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2a3129d461a8bef — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:3821 
        with open(__file__, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #39dd4aee2e281197 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:3827 
        f = urllib.request.urlopen(url, context=context)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #7a64c8dfc6dc72ba — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:4766 
        with open(os_helper.TESTFN, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a6a3325a5bd8450 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:4785 
                with open(os_helper.TESTFN, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8df4b13117dc23dd — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5068 
                with open(__file__, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4017ad0386a096ca — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5345 
        with open(SIGNING_CA) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8521a1b3d5388441 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5348 
        with open(SINGED_CERTFILE_ONLY) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd943f7e589151be — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5397 
        with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5a47e8053cdda20 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5474 
        with unittest.mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1e5da566ce081e5 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5475 
            os.environ['SSLKEYLOGFILE'] = os_helper.TESTFN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46785791f348c0f3 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_ssl.py:5476 
            self.assertEqual(os.environ['SSLKEYLOGFILE'], os_helper.TESTFN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5129db4c85e4e4b — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:301 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a4898d1a79955e2 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:795 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #032d51b3659391d4 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:807 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f07055bf32bd6a0 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:881 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f580bfa0dc32e74b — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:887 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d19a89556604b002 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:893 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8636cc6c00c09f5a — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:899 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #777b9cdb0a604d6d — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:912 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fda5fa8c25721036 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:917 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d42a1a311807ced5 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:1946 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbafca0df5c0ae76 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2292 
                                  cwd=os.curdir, env=os.environ, user=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbb6e2eabc20f5a4 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2339 
                                  cwd=os.curdir, env=os.environ, group=2**64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7133e09d99235251 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2398 
                                  cwd=os.curdir, env=os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fae6e17a05f3076c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2565 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0937a729a9fb779 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2588 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #490ab08cce8507cf — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2598 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ba210f580da6f0d — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2610 
        with open(fd, "w", errors="surrogateescape") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e70bf3ee906e7fb — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2974 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e659c793fa721e13 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:2989 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4ed710bbf5e37e9 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3013 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa0641ef5dc5c2ad — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3310 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abe497d65eb13e1f — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3316 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56b0b760040246bd — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3322 
        with io.open(os.devnull, "r+") as inout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e260f17826c98827 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3547 
                open(os.devnull, 'wb') as dev_null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a10898030c96250 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3751 
            with open(os.devnull, 'w') as null:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5e60726fc632bc5 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3863 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a03a02be3567b173 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3873 
        newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c06742df3d26fb17 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_subprocess.py:3884 
            newenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cbe8839c70761d0e — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_threading.py:2105 
            with open(os_helper.TESTFN, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee048bc2fc974fc2 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:107 
        f = open(os_helper.TESTFN, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #6780ab7853313f5f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:114 
        self.returned_obj = urllib.request.urlopen("file:%s" % self.quoted_pathname)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #a64955e71165d5df — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:202 
        for k in list(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5cd548f7caf96e3 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:271 
        self._saved_env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c712049037403836 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:273 
        os.environ = collections.OrderedDict()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #052219f7b88506e3 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:276 
        os.environ = self._saved_env

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57061874c8cb7bcb — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:280 
        os.environ['no_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd0daa8a9ce5f3ff — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:281 
        os.environ['No_Proxy'] = 'localhost'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1453ba5269acac37 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:284 
        os.environ['http_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f61d3afd480365c — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:285 
        os.environ['HTTP_PROXY'] = 'http://somewhere:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c723b3f6ab6cbf1c — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:289 
        os.environ['no_proxy'] = 'localhost, noproxy.com, my.proxy:1234'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f6eb02aae39cfa4 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:290 
        os.environ['No_Proxy'] = 'xyz.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55c78a3214c762b4 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:297 
        os.environ['http_proxy'] = 'http://somewhere:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b613e8358117ec7 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:298 
        os.environ['Http_Proxy'] = 'http://somewhereelse:3128'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #4a373eadcc0f059b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:309 
            fp = urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #371f56eec1a7581d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:322 
            fp = urllib.request.urlopen(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1694fc2f5c49cadb — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:330 
            resp = urllib.request.urlopen("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cb268f6730c0fcbc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:352 
                    urllib.request.urlopen(f"http:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6c616c8a8d3aaea9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:355 
                    urllib.request.urlopen(f"https:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #68140585a11d9015 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:391 
                    urllib.request.urlopen(f"http:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d920406f06d77f8b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:393 
                    urllib.request.urlopen(f"https:{schemeless_url}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #59a86d9e111e497c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:433 
                urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ae0be2b0e63d2e83 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:450 
                urllib.request.urlopen("http://python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #612758b219f359a1 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:465 
                    urllib.request.urlopen("http://something")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9bca4cedb9078a8a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:493 
            with urllib.request.urlopen(tmp_fileurl) as fobj:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f1155b799de7c6a9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:501 
            urllib.request.urlopen(tmp_fileurl)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b46a17b7df0430e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:547 
            urllib.request.urlopen(self.text_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #211537c23df65a5c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:549 
            urllib.request.urlopen(self.text_url_base64))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5481ece5a9371898 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:550 
        self.image_url_resp = self.enterContext(urllib.request.urlopen(self.image_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #995352a320ea3dc5 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:622 
            FILE = open(os_helper.TESTFN, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30df6e497bcdc961 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib.py:676 
        FILE = open(second_temp, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #bf280c128ca54afb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:68 
        with urllib.request.urlopen(file_url) as f:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #70aca19a6bccaca3 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:103 
        self.assertEqual(Request(url,
                                 headers={"Spam-eggs": "blah"}
                                 ).headers["Spam-eggs"], "blah")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #93f4c9d9eae472b4 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:106 
        self.assertEqual(Request(url,
                                 headers={"spam-EggS": "blah"}
                                 ).headers["Spam-eggs"], "blah")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8245b3967537a7fe — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:126 
        req = Request(url, headers={"Spam-eggs": "blah"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8dfb27aead7a762c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:420 
            return Request("http://blah/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5b4f7c485c36dd81 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:629 
        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #11337c6f41c15ea7 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:671 
        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #77c1b1f8ab412bd4 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:687 
        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #642c1e7207951867 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:709 
        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #272339e3336181d4 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:846 
            f = open(TESTFN, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9224f388c306a4fc — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:880 
                f = open(TESTFN, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #9c4bf00f08b03854 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:952 
        req = Request("http://example.com/","badpost")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #21a3ee9018b8597d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:958 
            req = Request("http://example.com/", data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #ff928cf7ce72079c — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:995 
        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #e9c19954f6feed62 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:996 
            req = Request("http://example.com/", f, {})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #14414f37df841b57 — Filesystem access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1002 
        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #10183b276e49f7e2 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1003 
            req = Request("http://example.com/", f, {"Content-Length": 30})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1a04a6b9376c587e — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1018 
        req = Request("http://example.com/", file_obj, {})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3271d6ecb7832f64 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1024 
        req = Request("http://example.com/", file_obj, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #28f78fba91640fe3 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1044 
                req = Request("http://example.com/", proc.stdout, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2335d89b9a13d71f — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1065 
            req = Request("http://example.com/", iterable_body(), headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cdddeb38828098c2 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1078 
        req = h.do_request_(Request("http://example.com/", ()))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c67081a74941f923 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1091 
            req = Request("http://example.com/", iterable_array, headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #21a621c3d4cd224f — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1166 
        r = Request('http://example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #57b7fd2de5a754c4 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1178 
        r = Request('http://www.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6c0a6211fc50ead5 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1192 
        req = Request(weird_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4aa9751612444029 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1198 
        req = Request(url_without_path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2e3471af9813c639 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1208 
        req = Request(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c1e875594649009a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1233 
        req = Request("http://example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #66a35b997b021b20 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1329 
        req = Request(from_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f6008fcf54f4ed25 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1351 
        req = Request(from_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #652821479c897516 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1400 
        fp = urllib.request.urlopen("http://python.org/path")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d2486a27a63eba71 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1433 
                response = opener.open('http://example.com/')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #eea9b6f9ab3a1896 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1442 
        req = Request(from_url, method="HEAD")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #980bc32dd19ac621 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1458 
            req = Request("http://acme.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #879b9c8c3c96c8ef — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1471 
        req = Request("http://www.perl.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9e8b044fa144288d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1475 
        req = Request("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f88ea2b7e13e5c8e — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1486 
        req = Request("http://www.python.org")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a1f3d1c01f34efb1 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1500 
        req = Request("https://www.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ac76ae39436950dd — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1514 
        req = Request("https://www.example.com/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8da9a2a26e7b9913 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1748 
        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #76c6fa312beb21ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1768 
        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #308a2628ea06e1b2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1794 
        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0a1a3d3ee9484bba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1820 
        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e0784d05f84d0e8c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1834 
        opener.open(request_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7eb7a8d8b63002de — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1849 
            req = Request("http://dummy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #96d675704e06e04d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:1860 
        req = Request("http://dummy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b8def597452064b9 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2030 
        self.get = Request("http://www.python.org/~jeremy/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f248aed061307d4c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2031 
        self.post = Request("http://www.python.org/~jeremy/",
                            "data",
                            headers={"X-Test": "test"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1515d90d52ad25d6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2034 
        self.head = Request("http://www.python.org/~jeremy/", method='HEAD')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #84ce5e33431f9ecc — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2078 
        req = Request("http://www.python.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #078409998f85be00 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2088 
        req = Request("http://www.%70ython.org/")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b3c8ad2274dba5ef — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2103 
        req = Request("http://www.python.org/?qs=query#fragment=true")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e57bbf37a1073c21 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2105 
        req = Request("http://www.python.org/#fun=true")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ca5b5ea3aa7a8ae3 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2.py:2110 
        req = Request(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0988e8a44d8267de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:311 
            self.assertTrue(urllib.request.urlopen(self.server_url))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #644540d74490e923 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:320 
            urllib.request.urlopen(self.server_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #54ab086467e1cba6 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:336 
            os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #581ae25f336e811e — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:337 
            os.environ.update(old_environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d60533c871ebaa8d — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:338 
        self.addCleanup(restore_environ, os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2af8c0cf52e6e188 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:339 
        os.environ['NO_PROXY'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9dc94be9717cbf17 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:340 
        os.environ['no_proxy'] = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #1af5eec6d70a80d7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:368 
            self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7886b8060bdb3493 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:374 
            self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b4be11ffcfde9ff2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:381 
        with self.opener.open(self.URL) as result:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #dea101dee8d5d769 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:390 
            result = self.opener.open(self.URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #8165c2fa0b472414 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:462 
            os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c111a27a6f7c785 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:463 
            os.environ.update(old_environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a909102a7f28e48 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:464 
        self.addCleanup(restore_environ, os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78d0999209d1155e — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:465 
        os.environ['NO_PROXY'] = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45341e7a7ac91d46 — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:466 
        os.environ['no_proxy'] = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #68321d1c31c98a52 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:470 
        f = urllib.request.urlopen(url, data, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9c3f8e606b9002af — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:592 
        with urllib.request.urlopen(req):

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2998066e84076589 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:600 
        with urllib.request.urlopen(req):

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2f7b13f09965dbb2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:607 
        with urllib.request.urlopen("http://localhost:%s" % handler.port) as open_url:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #23e8883185bda048 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:614 
        open_url = urllib.request.urlopen(
            "http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a4a940f5c399974e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:626 
        open_url = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cb775aaef76ec43e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:634 
        data = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c600cecae199e365 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:642 
        data = urllib.request.urlopen("http://localhost:%s" % handler.port)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c44b159c1d82985f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:661 
        opener.open(request, "1".encode("us-ascii"))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #11412b2cdd893104 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/greentest/3.15/test_urllib2_localnet.py:665 
        opener.open(request, "1234567890".encode("us-ascii"))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #419e3a0cfab79a5b — Environment-variable access.
pkgs/python/[email protected]/src/greentest/3.15/test_wsgiref.py:529 
    os_environ = dict(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gevent-websocket

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #d8d8a5165846bfa5 — Filesystem access.
pkgs/python/[email protected]/setup.py:14 
    long_description=open("README.rst").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25a179e65a700367 — Filesystem access.
pkgs/python/[email protected]/setup.py:17 
    license=open('LICENSE').read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

groq

python dependency
expand_more 18 low-confidence finding(s)
low egress dependency Excluded from app score #8c15856660e07197 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/groq/_base_client.py:306 
        return await self._client.request(self._page_cls, self._options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #12e6e6577c04beb5 — Environment-variable access.
pkgs/python/[email protected]/src/groq/_client.py:81 
            api_key = os.environ.get("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ea70aa0b7074c5a — Environment-variable access.
pkgs/python/[email protected]/src/groq/_client.py:89 
            base_url = os.environ.get("GROQ_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ac38a52b50b2f48 — Environment-variable access.
pkgs/python/[email protected]/src/groq/_client.py:93 
        custom_headers_env = os.environ.get("GROQ_CUSTOM_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d41e5b5a32e5f4fd — Environment-variable access.
pkgs/python/[email protected]/src/groq/_client.py:294 
            api_key = os.environ.get("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #580566a82092b3b1 — Environment-variable access.
pkgs/python/[email protected]/src/groq/_client.py:302 
            base_url = os.environ.get("GROQ_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb07761a689f5b0c — Environment-variable access.
pkgs/python/[email protected]/src/groq/_client.py:306 
        custom_headers_env = os.environ.get("GROQ_CUSTOM_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c75d80fc7eb9bbda — Filesystem access.
pkgs/python/[email protected]/src/groq/_files.py:69 
            return (path.name, path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6dd2b567f6bc6610 — Filesystem access.
pkgs/python/[email protected]/src/groq/_files.py:81 
        return pathlib.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff57b66539da2c12 — Filesystem access.
pkgs/python/[email protected]/src/groq/_files.py:111 
            return (path.name, await path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fc5777ef35a0002 — Filesystem access.
pkgs/python/[email protected]/src/groq/_files.py:123 
        return await anyio.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #275b82bf83577d50 — Environment-variable access.
pkgs/python/[email protected]/src/groq/_models.py:120 
            extra="allow", defer_build=coerce_boolean(os.environ.get("DEFER_PYDANTIC_BUILD", "true"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43f164f3a02337a2 — Filesystem access.
pkgs/python/[email protected]/src/groq/_response.py:495 
        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04afc5744018c8b5 — Filesystem access.
pkgs/python/[email protected]/src/groq/_response.py:537 
        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3e398bc7014c35b — Environment-variable access.
pkgs/python/[email protected]/src/groq/_utils/_logs.py:17 
    env = os.environ.get("GROQ_LOG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c21670be6a5b4d7 — Filesystem access.
pkgs/python/[email protected]/src/groq/_utils/_transform.py:248 
            binary = data.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afe19484a2e1ccd1 — Filesystem access.
pkgs/python/[email protected]/src/groq/_utils/_transform.py:414 
            binary = await anyio.Path(data).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bda9d6f286aa9e25 — Filesystem access.
pkgs/python/[email protected]/src/groq/_utils/_utils.py:379 
    contents = Path(path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mistletoe

python dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #8e2d77f186b39c25 — Filesystem access.
pkgs/python/[email protected]/mistletoe/cli.py:27 
        with open(filename, 'r', encoding='utf-8') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c89cf6a90edf122 — Filesystem access.
pkgs/python/[email protected]/mistletoe/contrib/md2jira.py:91 
        with open(args[0], 'r', encoding='utf-8') if len(args) == 1 else sys.stdin as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6f787f33cd48f2f — Filesystem access.
pkgs/python/[email protected]/mistletoe/contrib/md2jira.py:97 
            with open(self.options['output'], 'w', encoding='utf-8') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fdb89e9c69af6ac — Filesystem access.
pkgs/python/[email protected]/setup.py:4 
with open('README.md', 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

netlify-py

python dependency
expand_more 6 low-confidence finding(s)
low egress dependency Excluded from app score #00d2fa081c1b4d55 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/netlify_py/apis/api_base.py:45 
        response = requests.get(
            url,
            headers=api_headers,
            params=api_params
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #492dfd7a4b0ef5a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/netlify_py/apis/api_base.py:76 
        response = requests.post(
            url,
            headers=api_headers,
            json=data
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #38d9b0448eb41a4a — Filesystem access.
pkgs/python/[email protected]/netlify_py/apis/deploy.py:95 
                with open(os.path.join(root, file_name), 'rb') as current_file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5896addce655965b — Filesystem access.
pkgs/python/[email protected]/netlify_py/apis/deploy.py:160 
                with open(full_path, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e233f2bc8be9da9f — Filesystem access.
pkgs/python/[email protected]/setup.py:6 
with open(os.path.join(os.path.dirname(__file__), 'README.md')) as readme:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f7b73d3860b8b10 — Filesystem access.
pkgs/python/[email protected]/setup.py:16 
    version_file = open(filename).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ollama

python dependency
expand_more 12 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #c8206bbfd5ad59a9 — Filesystem access.
pkgs/python/[email protected]/examples/generate-image.py:13 
    with open('output.png', 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unreachable #48aa9c5682ff1ecf — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/multimodal-generate.py:8 
latest = httpx.get('https://xkcd.com/info.0.json')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #67d17fa6903ce754 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/multimodal-generate.py:13 
comic = httpx.get(f'https://xkcd.com/{num}/info.0.json')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #d857106ae8bacc9c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/multimodal-generate.py:20 
raw = httpx.get(comic.json().get('img'))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #49e7567a60785b42 — Environment-variable access.
pkgs/python/[email protected]/ollama/_client.py:108 
    api_key = os.getenv('OLLAMA_API_KEY', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51f65e426f1e7111 — Environment-variable access.
pkgs/python/[email protected]/ollama/_client.py:113 
      base_url=_parse_host(host or os.getenv('OLLAMA_HOST')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #36f6011675fb95c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/ollama/_client.py:139 
      r = self._client.request(*args, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #56ef73e4dba93d97 — Filesystem access.
pkgs/python/[email protected]/ollama/_client.py:611 
    with open(path, 'rb') as r:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b556847c47275dee — Filesystem access.
pkgs/python/[email protected]/ollama/_client.py:620 
    with open(path, 'rb') as r:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #89c05f15a9063f41 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/ollama/_client.py:732 
      r = await self._client.request(*args, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #749e67659e113faf — Filesystem access.
pkgs/python/[email protected]/ollama/_types.py:167 
      return b64encode(self.value.read_bytes() if isinstance(self.value, Path) else self.value).decode()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e979968e133de51 — Filesystem access.
pkgs/python/[email protected]/ollama/_types.py:172 
          return b64encode(Path(self.value).read_bytes()).decode()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

openai

python dependency
expand_more 69 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #a4913cc51fa036ea — Filesystem access.
pkgs/python/[email protected]/examples/image_stream.py:30 
            with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #d0911a11fb726d88 — Filesystem access.
pkgs/python/[email protected]/examples/image_stream.py:41 
            with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #5df699f2499d1ca3 — Environment-variable access.
pkgs/python/[email protected]/examples/realtime/azure_realtime.py:31 
    endpoint = os.environ["AZURE_OPENAI_ENDPOINT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #1065ea11870635aa — Environment-variable access.
pkgs/python/[email protected]/examples/realtime/azure_realtime.py:37 
    deployment_name = os.environ["AZURE_OPENAI_DEPLOYMENT_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c33e580bdc3ec5bc — Filesystem access.
pkgs/python/[email protected]/examples/uploads.py:30 
    data = file.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3793c1cdabe02b8c — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:158 
api_type: _ApiType | None = _t.cast(_ApiType, _os.environ.get("OPENAI_API_TYPE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4791b7edc1f6f791 — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:160 
api_version: str | None = _os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fce993c5f83f3fe6 — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:162 
azure_endpoint: str | None = _os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c11c54b5b31d8e9 — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:164 
azure_ad_token: str | None = _os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dde549091efa565 — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:338 
    return _os.environ.get("OPENAI_API_KEY") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8e42e82be317759 — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:342 
    return azure_endpoint is not None or _os.environ.get("AZURE_OPENAI_API_KEY") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d25555ab38f156b8 — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:347 
        _os.environ.get("AZURE_OPENAI_AD_TOKEN") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a019f1884703a80 — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:363 
            azure_endpoint = _os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #459dbb65ebe68929 — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:366 
            azure_ad_token = _os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f16ade0d5068f1b4 — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:369 
            api_version = _os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3d612c667759eec — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:379 
            if (azure_ad_token is not None or azure_ad_token_provider is not None) and _os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9c52ca8de4f25b3 — Environment-variable access.
pkgs/python/[email protected]/src/openai/__init__.py:379 
            if (azure_ad_token is not None or azure_ad_token_provider is not None) and _os.environ.get(
                "AZURE_OPENAI_API_KEY"
            ) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #23eb077581d74a3d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/openai/_base_client.py:309 
        return await self._client.request(self._page_cls, self._options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #dbada7b5c6f63463 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:209 
                api_key = os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00c3d493c80713e5 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:219 
            admin_api_key = os.environ.get("OPENAI_ADMIN_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #402de3303f6112bd — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:235 
            organization = os.environ.get("OPENAI_ORG_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05a1312665a51294 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:239 
            project = os.environ.get("OPENAI_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #609f8c96805d1975 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:243 
            webhook_secret = os.environ.get("OPENAI_WEBHOOK_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3263b03e77a7a187 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:251 
            base_url = os.environ.get("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49800cace107ed84 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:255 
        custom_headers_env = os.environ.get("OPENAI_CUSTOM_HEADERS") if provider_runtime is None else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5812eafebaf8d25 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:805 
                api_key = os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cceb7ac68c99b17 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:815 
            admin_api_key = os.environ.get("OPENAI_ADMIN_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ea91e7d27e64397 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:831 
            organization = os.environ.get("OPENAI_ORG_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #267621212ff39ba6 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:835 
            project = os.environ.get("OPENAI_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7e435e73480b808 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:839 
            webhook_secret = os.environ.get("OPENAI_WEBHOOK_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f5bb510e0c1f19d — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:847 
            base_url = os.environ.get("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08099d7ab93234ac — Environment-variable access.
pkgs/python/[email protected]/src/openai/_client.py:851 
        custom_headers_env = os.environ.get("OPENAI_CUSTOM_HEADERS") if provider_runtime is None else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5afe0be51f92c629 — Filesystem access.
pkgs/python/[email protected]/src/openai/_files.py:69 
            return (path.name, path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7237009437d60dc3 — Filesystem access.
pkgs/python/[email protected]/src/openai/_files.py:81 
        return pathlib.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c195e712d36ac271 — Filesystem access.
pkgs/python/[email protected]/src/openai/_files.py:111 
            return (path.name, await path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58c63a5d9e5c2113 — Filesystem access.
pkgs/python/[email protected]/src/openai/_files.py:123 
        return await anyio.Path(file).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46ffc1482f44ddc5 — Filesystem access.
pkgs/python/[email protected]/src/openai/_legacy_response.py:441 
        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb10fd88cbee49ac — Filesystem access.
pkgs/python/[email protected]/src/openai/_legacy_response.py:454 
        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a42ba3da5263d52 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_models.py:129 
            extra="allow", defer_build=coerce_boolean(os.environ.get("DEFER_PYDANTIC_BUILD", "true"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #139dcf9ef8f0ab6f — Filesystem access.
pkgs/python/[email protected]/src/openai/_response.py:513 
        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6cce11c67672c6c3 — Filesystem access.
pkgs/python/[email protected]/src/openai/_response.py:555 
        with open(file, mode="wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8a75b642bb67ce3 — Environment-variable access.
pkgs/python/[email protected]/src/openai/_utils/_logs.py:23 
    env = os.environ.get("OPENAI_LOG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad30b384e57fa402 — Filesystem access.
pkgs/python/[email protected]/src/openai/_utils/_transform.py:248 
            binary = data.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d521a2cad3b8e93b — Filesystem access.
pkgs/python/[email protected]/src/openai/_utils/_transform.py:414 
            binary = await anyio.Path(data).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d9f4a6a9984dff5 — Filesystem access.
pkgs/python/[email protected]/src/openai/_utils/_utils.py:383 
    contents = Path(path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8b2bba89bb7d8a3 — Filesystem access.
pkgs/python/[email protected]/src/openai/auth/_workload.py:58 
            with open(token_file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #0eb753cf53751709 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/openai/auth/_workload.py:106 
                response = http_client.get(url, params=params, headers={"Metadata": "true"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ed65556e362310cf — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/openai/auth/_workload.py:109 
                    response = client.get(url, params=params, headers={"Metadata": "true"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6cd696df0de2ab2f — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/openai/auth/_workload.py:153 
                response = http_client.get(url, params=params, headers={"Metadata-Flavor": "Google"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f9a9539dd220a99c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/openai/auth/_workload.py:156 
                    response = client.get(url, params=params, headers={"Metadata-Flavor": "Google"}, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #454deed94d5200fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/openai/auth/_workload.py:249 
            response = client.post(
                self.token_exchange_url,
                json={
                    "grant_type": TOKEN_EXCHANGE_GRANT_TYPE,
                    "subject_token": subject_token,
                    "subject_token_type": subject_token_type,
                    "identity_provider_id": self.workload_identity["identity_provider_id"],
                    "service_account_id": self.workload_identity["service_account_id"],
                },
                timeout=10.0,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #d00632ed23f1bc8d — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/_bedrock_auth.py:172 
        region = os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b230150ac499bb7 — Filesystem access.
pkgs/python/[email protected]/src/openai/lib/_validators.py:485 
                with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #723ca68c60ed54f3 — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/azure.py:214 
            api_key = os.environ.get("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7076032b4870b504 — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/azure.py:217 
            azure_ad_token = os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bdf65d9b2cfe295 — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/azure.py:225 
            api_version = os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ef2756a831fc814 — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/azure.py:239 
                azure_endpoint = os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc7899c97f1318ce — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/azure.py:538 
            api_key = os.environ.get("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f85be946edd39e18 — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/azure.py:541 
            azure_ad_token = os.environ.get("AZURE_OPENAI_AD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dac5fa43d0eb31d — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/azure.py:549 
            api_version = os.environ.get("OPENAI_API_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bbe3ee3e487c2ad — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/azure.py:563 
                azure_endpoint = os.environ.get("AZURE_OPENAI_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43f4d554594f1ba9 — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/bedrock.py:70 
    configured = region or os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c053116617031eec — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/bedrock.py:80 
    environment_base_url = os.environ.get("AWS_BEDROCK_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a23e782b05d4e533 — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/bedrock.py:105 
    token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46ecb3b551d33b70 — Environment-variable access.
pkgs/python/[email protected]/src/openai/lib/bedrock.py:150 
    environment_token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a69b20b0bd59721b — Environment-variable access.
pkgs/python/[email protected]/src/openai/providers/bedrock.py:248 
            token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e80293db79d1967 — Environment-variable access.
pkgs/python/[email protected]/src/openai/providers/bedrock.py:331 
            os.environ.get("AWS_REGION") or os.environ.get("AWS_DEFAULT_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f118efc3bfd32270 — Environment-variable access.
pkgs/python/[email protected]/src/openai/providers/bedrock.py:338 
        environment_base_url = _normalize_optional_string(os.environ.get("AWS_BEDROCK_BASE_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb102be1acda74bb — Environment-variable access.
pkgs/python/[email protected]/src/openai/providers/bedrock.py:391 
        and bool(os.environ.get("AWS_BEARER_TOKEN_BEDROCK"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

orjson

python dependency
expand_more 40 low-confidence finding(s)
low env_fs dependency Excluded from app score #144b1c3ec36b6b24 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:118 
data = json.load(open("../encoding/encodings.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a2f965c3274194c — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:120 
indexes = json.load(open("../encoding/indexes.json", "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98f7c88b9ca19b80 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:366 
  partially_generated_file = open(path, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77cbdc57660ca811 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:387 
label_file = open("src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74e937ba092c8064 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:405 
  docfile = open("doc/%s.txt" % name, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8ad14c3ad3aac93 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:457 
label_test_file = open("src/test_labels_names.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66a0c87ae297013c — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:484 
data_file = open("src/data.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5787b10d9858c766 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1173 
variant_file = open("src/variant.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f6ec1dafd639c89 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1417 
ffi_file = open("../encoding_c/src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d31ea20d65f238b — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1440 
single_byte_file = open("src/single_byte.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f9abf7c5b3c7189 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1494 
static_file = open("../encoding_c/include/encoding_rs_statics.h", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6489fc834d561aa — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1560 
utf_8_file = open("src/utf_8.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4632d84f80a0048b — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1623 
jis0208_in_file = open("src/test_data/jis0208_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28f345ee6187ee8f — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1632 
jis0208_in_ref_file = open("src/test_data/jis0208_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40fdd97556cf3138 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1642 
jis0208_out_file = open("src/test_data/jis0208_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa314977396c6132 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1643 
jis0208_out_ref_file = open("src/test_data/jis0208_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6afb465d14a0ebc4 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1660 
shift_jis_in_file = open("src/test_data/shift_jis_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d29b76e1adce16f — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1669 
shift_jis_in_ref_file = open("src/test_data/shift_jis_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1382bbcf1dce14cd — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1684 
shift_jis_out_file = open("src/test_data/shift_jis_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18575fc437805764 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1685 
shift_jis_out_ref_file = open("src/test_data/shift_jis_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05e0a3de49b975b7 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1713 
iso_2022_jp_in_file = open("src/test_data/iso_2022_jp_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e28fd51ace529f0e — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1722 
iso_2022_jp_in_ref_file = open("src/test_data/iso_2022_jp_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38031a727663f4aa — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1732 
iso_2022_jp_out_file = open("src/test_data/iso_2022_jp_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f4a3f8f687149e5 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1733 
iso_2022_jp_out_ref_file = open("src/test_data/iso_2022_jp_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2decb1e7841f8df8 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1761 
euc_kr_in_file = open("src/test_data/euc_kr_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6e686bbf8158772 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1770 
euc_kr_in_ref_file = open("src/test_data/euc_kr_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #785d5eb5a914f609 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1785 
euc_kr_out_file = open("src/test_data/euc_kr_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a233fbe69062084a — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1786 
euc_kr_out_ref_file = open("src/test_data/euc_kr_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34704831dae6c347 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1802 
gb18030_in_file = open("src/test_data/gb18030_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49c436ffcc376f17 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1811 
gb18030_in_ref_file = open("src/test_data/gb18030_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0991bc84a33b114 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1826 
gb18030_out_file = open("src/test_data/gb18030_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25148cc68a939cd2 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1827 
gb18030_out_ref_file = open("src/test_data/gb18030_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c7613b1ba9692b0 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1845 
big5_in_file = open("src/test_data/big5_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c32b7547fc16a23 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1861 
big5_in_ref_file = open("src/test_data/big5_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc0c3b9156650249 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1898 
big5_out_file = open("src/test_data/big5_out.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e8e5d1934916b7b — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1899 
big5_out_ref_file = open("src/test_data/big5_out_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c613965335a2d98 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1921 
jis0212_in_file = open("src/test_data/jis0212_in.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #267dd21a4d4613b3 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1930 
jis0212_in_ref_file = open("src/test_data/jis0212_in_ref.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc0b2a3b37a985b9 — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1942 
codepage_file = open("../codepage/src/lib.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50441586f64342db — Filesystem access.
pkgs/python/[email protected]/include/cargo/encoding_rs-0.8.35/generate-encoding-data.py:1974 
codepage_test_file = open("../codepage/src/tests.rs", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pdfminer.six

python dependency
expand_more 28 low-confidence finding(s)
low env_fs dependency Excluded from app score #62fb4906bf2b6793 — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/ccitt.py:597 
        with open(path, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f48f25bfa6fd603d — Environment-variable access.
pkgs/python/pdfminer.six@20260107/pdfminer/cmapdb.py:253 
            os.environ.get("CMAP_PATH", "/usr/share/pdfminer/"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4223dfe480afac8 — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:354 
                self.write_text(item.get_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c4aec8ad2485b5d — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:356 
                self.write_text("\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7644ec8ef9fd3608 — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:361 
            self.write_text(f"Page {ltpage.pageid}\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c852b27a5157d3f5 — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:363 
        self.write_text("\f")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fe1638b80c0844b — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:544 
            self.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff5fe4d91a680eb1 — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:589 
        self.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14946ee6ab4fa724 — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:675 
                self.write_text(item.get_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d48044b68da39e1 — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/converter.py:816 
                self.write_text(item.get_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1037dc22833aba2b — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/fontmetrics.py:39 
    with open(path) as fileinput:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73f8b5aed334db98 — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/glyphlist.py:64 
    with open(path) as fileinput:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e6480ff1b08f5be — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/image.py:152 
        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bccf383051e8bd1f — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/image.py:174 
        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae5d7db6e47301cc — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/image.py:192 
        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8cfcd6ffddb6bb9c — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/image.py:228 
        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a70edecd852104a — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/image.py:242 
        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #642982537b9b4006 — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/image.py:274 
        with open(path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38eb304738a46b07 — Filesystem access.
pkgs/python/pdfminer.six@20260107/pdfminer/utils.py:46 
            self.file_handler: AnyIO = open(filename, *args, **kwargs)  # noqa: SIM115

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #ace44aa08464457a — Filesystem access.
pkgs/python/pdfminer.six@20260107/tools/conv_cmap.py:178 
        with open(path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #9af1691fb82522a0 — Filesystem access.
pkgs/python/pdfminer.six@20260107/tools/dumppdf.py:158 
    with open(fname, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #10c393f4f52a1b0c — Filesystem access.
pkgs/python/pdfminer.six@20260107/tools/dumppdf.py:231 
        with open(path, "wb") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #4ddd78076a8b8cb3 — Filesystem access.
pkgs/python/pdfminer.six@20260107/tools/dumppdf.py:234 
    with open(fname, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #1ae6e3e847af0a2d — Filesystem access.
pkgs/python/pdfminer.six@20260107/tools/dumppdf.py:261 
    with open(fname, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #4eebd9c71777bae1 — Filesystem access.
pkgs/python/pdfminer.six@20260107/tools/dumppdf.py:436 
    with sys.stdout if args.outfile == "-" else open(args.outfile, "w") as outfp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #8299999df4e63c5e — Filesystem access.
pkgs/python/pdfminer.six@20260107/tools/pdf2txt.py:62 
            with open(fname, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #f7296b2fbbda0e1e — Filesystem access.
pkgs/python/pdfminer.six@20260107/tools/pdf2txt.py:66 
        with open(outfile, "wb") as outfp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #7f07e5146488338f — Filesystem access.
pkgs/python/pdfminer.six@20260107/tools/pdf2txt.py:68 
                with open(fname, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

requests

python dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #44908e129c047dea — Environment-variable access.
pkgs/python/[email protected]/src/requests/sessions.py:857 
                    os.environ.get("REQUESTS_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41fc7c62be13b3e2 — Environment-variable access.
pkgs/python/[email protected]/src/requests/sessions.py:858 
                    or os.environ.get("CURL_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da5fa103e583bcb7 — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:239 
    netrc_file = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca736f64a4f91dda — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:798 
        old_value = os.environ.get(env_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce1876f187952b9a — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:799 
        os.environ[env_name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf027b6dce92627f — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:805 
                del os.environ[env_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4282fedc9b1b825 — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:807 
                os.environ[env_name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02cdf0abfc1cebec — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:820 
        return os.environ.get(key) or os.environ.get(key.upper())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

sqlmodel

python dependency
expand_more 56 low-confidence finding(s)
low egress dependency Excluded from app score #3cf5b9c94def8b33 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/advanced/uuid/tutorial002_py310.py:49 
        selected_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d532b2855ba339c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/app_testing/tutorial001_py310/main.py:75 
    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c236c1bc617b98a8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/app_testing/tutorial001_py310/main.py:85 
    db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #aafc7e63a53ca7b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/app_testing/tutorial001_py310/main.py:98 
    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b003f27c1f93ac46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/app_testing/tutorial001_py310/test_main.py:89 
    response = client.get(f"/heroes/{hero_1.id}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1603fdd257deb5b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/app_testing/tutorial001_py310/test_main.py:121 
    hero_in_db = session.get(Hero, hero_1.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c5fd9fc7b5df55af — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/delete/tutorial001_py310.py:68 
        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #85d32a59add96e39 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/delete/tutorial001_py310.py:77 
        db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bf1940fbcd7f5e36 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/delete/tutorial001_py310.py:91 
        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #32d7d604525c497f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/limit_and_offset/tutorial001_py310.py:62 
        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d02675400c0efa93 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/read_one/tutorial001_py310.py:62 
        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f3f134931695f976 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:113 
    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #779a025bba76d07d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:123 
    db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ecaac71d69afd853 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:136 
    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6e6524bb6ed6d036 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:166 
    team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d9454481a4f9b0e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:179 
    db_team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d54d883b4a769588 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/relationships/tutorial001_py310.py:192 
    team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #23d3e86a2e4a8b49 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/session_with_dependency/tutorial001_py310.py:75 
    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #88ad0871844743bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/session_with_dependency/tutorial001_py310.py:85 
    db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0ff91d36c3aaaa10 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/session_with_dependency/tutorial001_py310.py:98 
    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fc3086a6aa95b015 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:104 
    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0045b306e416b66e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:114 
    db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3556a88ed3ea4983 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:127 
    hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #031c5916520479c3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:157 
    team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fe34c71da03d7989 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:170 
    db_team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4f8f4dace858350a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/teams/tutorial001_py310.py:183 
    team = session.get(Team, team_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cc3fbb7ebd5b41bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/update/tutorial001_py310.py:68 
        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ab5f842d28c75f47 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/update/tutorial001_py310.py:77 
        db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c32bcf4d675275b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/update/tutorial002_py310.py:77 
        hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0e052c2f1559999b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/fastapi/update/tutorial002_py310.py:86 
        db_hero = session.get(Hero, hero_id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d3ccbe5b7a671236 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/one/tutorial008_py310.py:44 
        hero = session.get(Hero, 1)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #aa69bd022e768c26 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs_src/tutorial/one/tutorial009_py310.py:44 
        hero = session.get(Hero, 9001)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unreachable #ceb4ffe8736d362a — Filesystem access.
pkgs/python/[email protected]/scripts/add_latest_release_date.py:12 
    with open(RELEASE_NOTES_FILE) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #7c7c77ed343e7fc0 — Filesystem access.
pkgs/python/[email protected]/scripts/add_latest_release_date.py:31 
        with open(RELEASE_NOTES_FILE, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c62bc5c4e914ccc8 — Environment-variable access.
pkgs/python/[email protected]/scripts/docs.py:26 
    os.environ["DYLD_FALLBACK_LIBRARY_PATH"] = "/opt/homebrew/lib"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #7af09b099e04bc1a — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:43 
    content = en_index.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #991b61dfe6cd787a — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:48 
    sponsors = yaml.safe_load(sponsors_data_path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #2c0df193c3ac762c — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:79 
    readme_path.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #a29ab9fdde107f10 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:90 
    readme_content = readme_path.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #cb2ee23946b17f4c — Environment-variable access.
pkgs/python/[email protected]/scripts/docs.py:114 
    subprocess.run(args, env={**os.environ, "LINENUMS": "true"}, check=True)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c408ca3f4783868e — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:159 
    base_content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #81117d7f7635ab38 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:207 
        version_file.write_text(content_format, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #1855910f9f92380b — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:263 
        content = md_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #cf7d7e2b49550d73 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:270 
            md_file.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #d07feb20a9f3e76a — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:285 
        all_docs_content += md_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #3d93cf33d50aa11f — Filesystem access.
pkgs/python/[email protected]/scripts/generate_select.py:46 
template: Template = Template(template_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c86ccbb76941231a — Filesystem access.
pkgs/python/[email protected]/scripts/generate_select.py:57 
current_content = destiny_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #6c70bdc5725e8a76 — Environment-variable access.
pkgs/python/[email protected]/scripts/generate_select.py:59 
if current_content != result and os.getenv("CHECK_JINJA"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #1ac11b02d5456471 — Filesystem access.
pkgs/python/[email protected]/scripts/generate_select.py:64 
destiny_path.write_text(result)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #ea92a569c19b52b2 — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:139 
    version_file_content = version_file.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #4b182582033acd8f — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:140 
    release_notes_content = release_notes_file.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #f72b6baa0676f262 — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:145 
    version_file.write_text(
        update_version_file(version_file_content, version, version_file)
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #2fcf33ddb34f3c6a — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:148 
    release_notes_file.write_text(
        update_release_notes(
            release_notes_content, version, parsed_release_date, release_notes_file
        )
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #ac45b6307689926d — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:171 
    typer.echo(get_current_version(version_file.read_text(), version_file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #a8bbc6bb96342f1c — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:199 
    version = get_current_version(version_file.read_text(), version_file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #e7c487b9ab769b55 — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:202 
            release_notes_file.read_text(), version, release_notes_file

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tiktoken

python dependency
expand_more 16 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #0f30f6b717815b8d — Environment-variable access.
pkgs/python/[email protected]/scripts/benchmark.py:16 
    num_threads = int(os.environ["RAYON_NUM_THREADS"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #77e6b8bded70ddd4 — Filesystem access.
pkgs/python/[email protected]/scripts/redact.py:11 
    text = path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c0c8282bd1b8cb03 — Filesystem access.
pkgs/python/[email protected]/scripts/redact.py:35 
            path.write_text(redacted_text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unreachable #b7e21c1fb2363c24 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/scripts/wheel_download.py:13 
    response = requests.get(artifacts_url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #bf39be86d618cd68 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/scripts/wheel_download.py:31 
        response = requests.get(download_url, headers=headers, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unreachable #740b0fa360a07378 — Filesystem access.
pkgs/python/[email protected]/scripts/wheel_download.py:35 
        with open(temp_zip, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e86b7f3d8e8a9d9a — Filesystem access.
pkgs/python/[email protected]/tiktoken/_educational.py:212 
    with open(__file__) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e5dc4b8756b5bf6 — Filesystem access.
pkgs/python/[email protected]/tiktoken/load.py:10 
        with open(blobpath, "rb", buffering=0) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #7d4869f4b9197781 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/tiktoken/load.py:17 
        resp = requests.get(blobpath)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #a721a8ec0aa68a00 — Filesystem access.
pkgs/python/[email protected]/tiktoken/load.py:27 
    return blobfile.read_bytes(blobpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91a27d52075f0e32 — Environment-variable access.
pkgs/python/[email protected]/tiktoken/load.py:37 
    if "TIKTOKEN_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b06f6a5dfc85353 — Environment-variable access.
pkgs/python/[email protected]/tiktoken/load.py:38 
        cache_dir = os.environ["TIKTOKEN_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d69a97d2fd5b5b4 — Environment-variable access.
pkgs/python/[email protected]/tiktoken/load.py:39 
    elif "DATA_GYM_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73fb14d4350b67d8 — Environment-variable access.
pkgs/python/[email protected]/tiktoken/load.py:40 
        cache_dir = os.environ["DATA_GYM_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #795f179293e98623 — Filesystem access.
pkgs/python/[email protected]/tiktoken/load.py:55 
        with open(cache_path, "rb", buffering=0) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36910c1a4006b7b7 — Filesystem access.
pkgs/python/[email protected]/tiktoken/load.py:78 
        with open(tmp_filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

toml

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #20bfe88da05546ad — Filesystem access.
pkgs/python/[email protected]/setup.py:8 
with open("README.rst") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bda819cfe28e62d — Filesystem access.
pkgs/python/[email protected]/toml/decoder.py:133 
        with io.open(_getpath(f), encoding='utf-8') as ffile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

urllib3

python dependency
expand_more 12 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #508b6e5a3f0e8057 — Environment-variable access.
pkgs/python/[email protected]/docs/conf.py:15 
if "READTHEDOCS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c2117d81c8eab4b0 — Environment-variable access.
pkgs/python/[email protected]/docs/conf.py:76 
html_baseurl = os.environ.get("READTHEDOCS_CANONICAL_URL", "/")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fb1ff2dfb131212 — Filesystem access.
pkgs/python/[email protected]/dummyserver/app.py:466 
        return await make_response(file_path.read_bytes(), 200, headers)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca2a0eeb8bcbe180 — Filesystem access.
pkgs/python/[email protected]/dummyserver/app.py:483 
    return await make_response(file_path.read_bytes(), 200, headers)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #75f1e35e070456d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/urllib3/__init__.py:193 
    return _DEFAULT_POOL.request(
        method,
        url,
        body=body,
        fields=fields,
        headers=headers,
        preload_content=preload_content,
        decode_content=decode_content,
        redirect=redirect,
        retries=retries,
        timeout=timeout,
        json=json,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #742bd9a0faa7625f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/urllib3/connectionpool.py:210 
            self.pool.put(None)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5873647b497e3a39 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/urllib3/connectionpool.py:310 
                self.pool.put(conn, block=False)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a22d438bb971c242 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/urllib3/connectionpool.py:493 
            conn.request(
                method,
                url,
                body=body,
                headers=headers,
                chunked=chunked,
                preload_content=preload_content,
                decode_content=decode_content,
                enforce_content_length=enforce_content_length,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #0f3f23473ecce192 — Filesystem access.
pkgs/python/[email protected]/src/urllib3/contrib/emscripten/fetch.py:204 
        streaming_worker_code = (
            files(__package__)
            .joinpath("emscripten_fetch_worker.js")
            .read_text(encoding="utf-8")
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac6c0356b2f8bc11 — Environment-variable access.
pkgs/python/[email protected]/src/urllib3/util/ssl_.py:317 
    if "SSLKEYLOGFILE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c654706a94e3397 — Environment-variable access.
pkgs/python/[email protected]/src/urllib3/util/ssl_.py:318 
        sslkeylogfile = os.path.expandvars(os.environ.get("SSLKEYLOGFILE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0584874eaaf3e57f — Filesystem access.
pkgs/python/[email protected]/src/urllib3/util/ssl_.py:452 
    with open(key_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

xhtml2pdf

python dependency
expand_more 13 low-confidence finding(s)
low egress dependency Excluded from app score #1b77395fe4ae0c46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/xhtml2pdf/files.py:227 
            urlResponse = request.urlopen(self.uri)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #222855b20587e59d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/xhtml2pdf/files.py:267 
            conn = httplib.HTTPSConnection(server, **httpConfig)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b69916727c614ae3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/xhtml2pdf/files.py:270 
        conn.request("GET", path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #0aa542a185fca2fa — Filesystem access.
pkgs/python/[email protected]/xhtml2pdf/files.py:317 
                with open(uri, encoding="utf-8") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89189900070303be — Filesystem access.
pkgs/python/[email protected]/xhtml2pdf/files.py:320 
                with open(uri, "rb") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86622aca7c71c7e0 — Filesystem access.
pkgs/python/[email protected]/xhtml2pdf/files.py:349 
        with open(self.path, "rb") as arch:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b417b223dd6b63c4 — Filesystem access.
pkgs/python/[email protected]/xhtml2pdf/pisa.py:273 
            with open(a, encoding="utf-8") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db19f727b27a3440 — Filesystem access.
pkgs/python/[email protected]/xhtml2pdf/pisa.py:328 
            with open(fsrc, "rb") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #632a24bf55814d9e — Filesystem access.
pkgs/python/[email protected]/xhtml2pdf/pisa.py:340 
                    with open(dest, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8de2dbf1a0db08fd — Filesystem access.
pkgs/python/[email protected]/xhtml2pdf/pisa.py:362 
                with open(dest, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65adb3fae4d3a2ef — Filesystem access.
pkgs/python/[email protected]/xhtml2pdf/pisa.py:367 
            fdest = open(dest, "wb")  # noqa: SIM115

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1284d5094b23eb6b — Filesystem access.
pkgs/python/[email protected]/xhtml2pdf/pisa.py:444 
    with open(filename, "rb") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31257628a34d5bca — Filesystem access.
pkgs/python/[email protected]/xhtml2pdf/w3c/cssParser.py:442 
        with open(srcFile, encoding="utf-8") as file_handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • playwright prod — no sdist (wheels only)
  • google-generativeai prod — no sdist (wheels only)