Close Open Privacy Scan

link https://github.com/huggingface/trl
bolt Snapshot: commit 1925183
science engine v3
schedule 2026-07-11T17:08:11.527949+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code. Dependency data flows are listed separately and do not affect this verdict.

App Privacy Score

82 /100
Low privacy risk

Low risk · 2003 finding(s)

Dependency score: 0 (High risk)

bar_chart Score Breakdown

egress −15
env_fs −3

list Scan Summary

6 high 8 medium 1989 low
First-party packages: 1
Dependency packages: 20
Ecosystem: python

swap_horiz Application data flows

No application data flows were found. See dependency data flows below.

hub Dependency data flows (6)
high harbor dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/harbor/environments/novita.py:757 → pkgs/python/[email protected]/src/harbor/environments/novita.py:777
high openreward dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/openreward/cli.py:257 → pkgs/python/[email protected]/openreward/cli.py:268
high openreward dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/openreward/cli.py:257 → pkgs/python/[email protected]/openreward/cli.py:272
high transformers dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 → pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2561
high transformers dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 → pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2562
high transformers dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/utils/hub.py:178 → pkgs/python/[email protected]/src/transformers/utils/hub.py:178

</> First-Party Code

first-party (python)

python first-party
expand_more 104 low-confidence finding(s)
low env_fs production #b346fbd935a80242 — Environment-variable access.
repo/examples/scripts/distillation.py:78 
os.environ.setdefault("TRACKIO_SPACE_ID", "trl-trackio")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ccca0d77926a409 — Environment-variable access.
repo/examples/scripts/openenv/catch.py:150 
        env={**os.environ, "PYTHONPATH": f"{work_dir}/src"},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1700273e5b13356d — Filesystem access.
repo/examples/scripts/openenv/sudoku.py:197 
    return prompt_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #862bcb97e82824b0 — Filesystem access.
repo/examples/scripts/sdft.py:305 
    with open(sample_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f66085616085c5ab — Filesystem access.
repo/examples/scripts/sft_vlm_gemma3.py:102 
                with open(img_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd023a4e6cc454db — Filesystem access.
repo/examples/scripts/ssd_eval.py:158 
    with open(jsonl_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c4b3cd7d65bcd1e — Filesystem access.
repo/examples/scripts/ssd_eval.py:251 
    with open(args.output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b72d0bf41e093720 — Filesystem access.
repo/scripts/add_copyrights.py:58 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2deac23c0203f701 — Filesystem access.
repo/scripts/add_copyrights.py:67 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7eefac65175fecb — Filesystem access.
repo/scripts/generate_tiny_models/_common.py:52 
    match = re.search(r'"transformers>=([^"]+)"', pyproject.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8095f6fc04af2151 — Filesystem access.
repo/scripts/log_reports.py:40 
        with open(log) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8524851d3654637a — Environment-variable access.
repo/scripts/log_reports.py:93 
            "text": {"type": "plain_text", "text": f"🤗 Results of the {os.environ.get('TEST_TYPE', '')} TRL tests."},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fdf3198ba87720f — Environment-variable access.
repo/scripts/log_reports.py:131 
                    "url": f"https://github.com/huggingface/trl/actions/runs/{os.environ['GITHUB_RUN_ID']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6da69b9ea5ff75fc — Environment-variable access.
repo/scripts/log_reports.py:141 
                        "text": f"On Push main {os.environ.get('TEST_TYPE')} results for {date.today()}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8b9fcbc89484411 — Environment-variable access.
repo/scripts/log_reports.py:150 
        slack_client = WebClient(token=os.environ.get("SLACK_API_TOKEN"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fda6920051cd68d3 — Environment-variable access.
repo/trl/_compat.py:83 
        os.environ["VLLM_LOGGING_LEVEL"] = os.getenv("VLLM_LOGGING_LEVEL", "ERROR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fabdeac13034afe — Filesystem access.
repo/trl/chat_template_utils.py:482 
cohere_chat_template = (_CHAT_TEMPLATES_DIR / "cohere.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a970a13fc45e78b2 — Filesystem access.
repo/trl/chat_template_utils.py:484 
cohere2_chat_template = (_CHAT_TEMPLATES_DIR / "cohere2.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #471b1eea80bccf9a — Filesystem access.
repo/trl/chat_template_utils.py:486 
deepseekv3_chat_template = (_CHAT_TEMPLATES_DIR / "deepseekv3.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab34666440b06f6a — Filesystem access.
repo/trl/chat_template_utils.py:488 
gemma_chat_template = (_CHAT_TEMPLATES_DIR / "gemma.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #342ad5274b1ce099 — Filesystem access.
repo/trl/chat_template_utils.py:490 
gemma3_chat_template = (_CHAT_TEMPLATES_DIR / "gemma3.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d25305784b2c98bb — Filesystem access.
repo/trl/chat_template_utils.py:492 
glm4moe_chat_template = (_CHAT_TEMPLATES_DIR / "glm4moe.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3431d44c895dcd6 — Filesystem access.
repo/trl/chat_template_utils.py:494 
gptoss_chat_template = (_CHAT_TEMPLATES_DIR / "gptoss.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2cee446f1686dd2 — Filesystem access.
repo/trl/chat_template_utils.py:496 
idefics3_chat_template = (_CHAT_TEMPLATES_DIR / "idefics3.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a85622dc9ceb42e — Filesystem access.
repo/trl/chat_template_utils.py:498 
llama3_chat_template = (_CHAT_TEMPLATES_DIR / "llama3.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65be07e735b92598 — Filesystem access.
repo/trl/chat_template_utils.py:500 
llama3_1_chat_template = (_CHAT_TEMPLATES_DIR / "llama3_1.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3ad2ee7a03f41a0 — Filesystem access.
repo/trl/chat_template_utils.py:502 
llama3_2_chat_template = (_CHAT_TEMPLATES_DIR / "llama3_2.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b67086ae29c86ddb — Filesystem access.
repo/trl/chat_template_utils.py:504 
llava_next_chat_template = (_CHAT_TEMPLATES_DIR / "llava_next.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b725e63af18196b — Filesystem access.
repo/trl/chat_template_utils.py:506 
nemotron_3_nano_chat_template = (_CHAT_TEMPLATES_DIR / "nemotron_3_nano.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c3e814997b5a0ec — Filesystem access.
repo/trl/chat_template_utils.py:508 
nemotron_3_super_chat_template = (_CHAT_TEMPLATES_DIR / "nemotron_3_super.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4467bbcffd60071b — Filesystem access.
repo/trl/chat_template_utils.py:510 
nemotron_3_ultra_chat_template = (_CHAT_TEMPLATES_DIR / "nemotron_3_ultra.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #342d7f14cc80d93e — Filesystem access.
repo/trl/chat_template_utils.py:512 
phi3_chat_template = (_CHAT_TEMPLATES_DIR / "phi3.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a366818285c6c6ab — Filesystem access.
repo/trl/chat_template_utils.py:514 
phi3_5_chat_template = (_CHAT_TEMPLATES_DIR / "phi3_5.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02185b3f986206d3 — Filesystem access.
repo/trl/chat_template_utils.py:516 
qwen2_5_chat_template = (_CHAT_TEMPLATES_DIR / "qwen2_5.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbd847d99fc47300 — Filesystem access.
repo/trl/chat_template_utils.py:519 
qwen2_5_vl_chat_template = (_CHAT_TEMPLATES_DIR / "qwen2_5_vl.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0897dd1a05dc2cc — Filesystem access.
repo/trl/chat_template_utils.py:521 
qwen3_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4daa598f20147a0 — Filesystem access.
repo/trl/chat_template_utils.py:523 
qwen3_instruct_2507_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_instruct_2507.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd2e178b0f610d7a — Filesystem access.
repo/trl/chat_template_utils.py:525 
qwen3_vl_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_vl.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e665420f82a58e7 — Filesystem access.
repo/trl/chat_template_utils.py:527 
qwen3_5_nothink_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_5_nothink.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfec172f80a390cc — Filesystem access.
repo/trl/chat_template_utils.py:529 
qwen3_5_think_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_5_think.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #673b0f5fb7a03fb5 — Filesystem access.
repo/trl/chat_template_utils.py:531 
qwen3_6_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_6.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f09915f6362f867c — Filesystem access.
repo/trl/chat_template_utils.py:816 
cohere_training_chat_template = (_CHAT_TEMPLATES_DIR / "cohere_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4ef4d2a5aec18f1 — Filesystem access.
repo/trl/chat_template_utils.py:818 
cohere2_training_chat_template = (_CHAT_TEMPLATES_DIR / "cohere2_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b7b55a331ba6724 — Filesystem access.
repo/trl/chat_template_utils.py:820 
deepseekv3_training_chat_template = (_CHAT_TEMPLATES_DIR / "deepseekv3_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90d1210d0dfe7742 — Filesystem access.
repo/trl/chat_template_utils.py:822 
gemma_training_chat_template = (_CHAT_TEMPLATES_DIR / "gemma_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a612f515f0f54a32 — Filesystem access.
repo/trl/chat_template_utils.py:824 
gemma3_training_chat_template = (_CHAT_TEMPLATES_DIR / "gemma3_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f65e0be315b826a — Filesystem access.
repo/trl/chat_template_utils.py:826 
glm4moe_training_chat_template = (_CHAT_TEMPLATES_DIR / "glm4moe_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe4fbc7abf5e17e7 — Filesystem access.
repo/trl/chat_template_utils.py:828 
gptoss_training_chat_template = (_CHAT_TEMPLATES_DIR / "gptoss_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c83d9256b156cfde — Filesystem access.
repo/trl/chat_template_utils.py:830 
idefics3_training_chat_template = (_CHAT_TEMPLATES_DIR / "idefics3_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4e7e25e9ad538b7 — Filesystem access.
repo/trl/chat_template_utils.py:832 
llama3_training_chat_template = (_CHAT_TEMPLATES_DIR / "llama3_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2be3b7ccf36a71c — Filesystem access.
repo/trl/chat_template_utils.py:834 
llava_next_training_chat_template = (_CHAT_TEMPLATES_DIR / "llava_next_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ac53ac58bc06da7 — Filesystem access.
repo/trl/chat_template_utils.py:836 
nemotron_3_nano_training_chat_template = (_CHAT_TEMPLATES_DIR / "nemotron_3_nano_training.jinja").read_text(
    encoding="utf-8"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7668e30104301570 — Filesystem access.
repo/trl/chat_template_utils.py:840 
nemotron_3_super_training_chat_template = (_CHAT_TEMPLATES_DIR / "nemotron_3_super_training.jinja").read_text(
    encoding="utf-8"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf80049bfd8d421f — Filesystem access.
repo/trl/chat_template_utils.py:844 
nemotron_3_ultra_training_chat_template = (_CHAT_TEMPLATES_DIR / "nemotron_3_ultra_training.jinja").read_text(
    encoding="utf-8"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #885824c9be64ec06 — Filesystem access.
repo/trl/chat_template_utils.py:848 
phi3_training_chat_template = (_CHAT_TEMPLATES_DIR / "phi3_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4f06a5719fec84a — Filesystem access.
repo/trl/chat_template_utils.py:850 
phi3_5_training_chat_template = (_CHAT_TEMPLATES_DIR / "phi3_5_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ddf9e3ba76198f8 — Filesystem access.
repo/trl/chat_template_utils.py:852 
qwen2_5_training_chat_template = (_CHAT_TEMPLATES_DIR / "qwen2_5_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e116451f27e85f4 — Filesystem access.
repo/trl/chat_template_utils.py:854 
qwen2_5_vl_training_chat_template = (_CHAT_TEMPLATES_DIR / "qwen2_5_vl_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e77b02fbc54c4fb2 — Filesystem access.
repo/trl/chat_template_utils.py:856 
qwen3_training_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #279d7e3cda7357d3 — Filesystem access.
repo/trl/chat_template_utils.py:858 
qwen3_instruct_2507_training_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_instruct_2507_training.jinja").read_text(
    encoding="utf-8"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #462b2e25bcb9f509 — Filesystem access.
repo/trl/chat_template_utils.py:862 
qwen3_vl_training_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_vl_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #609edf0f6c92ecf6 — Filesystem access.
repo/trl/chat_template_utils.py:864 
qwen3_5_nothink_training_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_5_nothink_training.jinja").read_text(
    encoding="utf-8"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52634930b23189dc — Filesystem access.
repo/trl/chat_template_utils.py:868 
qwen3_5_think_training_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_5_think_training.jinja").read_text(
    encoding="utf-8"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72cea1372aaef0ab — Filesystem access.
repo/trl/chat_template_utils.py:872 
qwen3_6_training_chat_template = (_CHAT_TEMPLATES_DIR / "qwen3_6_training.jinja").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad62f8d6a1b78bf3 — Environment-variable access.
repo/trl/experimental/__init__.py:30 
if not os.environ.get("TRL_EXPERIMENTAL_SILENCE"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7d6064a5c477348 — Environment-variable access.
repo/trl/experimental/async_grpo/async_rollout_worker.py:120 
    os.environ["CUDA_VISIBLE_DEVICES"] = ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ec7fc7d9852da8f — Environment-variable access.
repo/trl/experimental/async_grpo/async_rollout_worker.py:122 
        os.environ.pop(k, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85a63f1e8d21f982 — Filesystem access.
repo/trl/experimental/bco/bco_trainer.py:165 
            with open(json_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14edc3f71412e200 — Filesystem access.
repo/trl/experimental/bco/bco_trainer.py:172 
        with open(json_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0c694585adabb18 — Filesystem access.
repo/trl/experimental/harbor/_env.py:137 
        for line in dockerfile.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8f8bd094d57f9af — Filesystem access.
repo/trl/experimental/harbor/_spec.py:102 
        cfg = tomllib.loads((task_dir / "task.toml").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bfbd3115de773fd — Environment-variable access.
repo/trl/experimental/online_dpo/online_dpo_trainer.py:476 
                os.environ["RANK"] = str(self.accelerator.process_index)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5dcb7d3951dcc03d — Environment-variable access.
repo/trl/experimental/online_dpo/online_dpo_trainer.py:477 
                os.environ["LOCAL_RANK"] = str(self.accelerator.local_process_index)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10957b56c4481101 — Environment-variable access.
repo/trl/experimental/online_dpo/online_dpo_trainer.py:478 
                os.environ["WORLD_SIZE"] = str(self.accelerator.num_processes)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #222a9a69d985338d — Environment-variable access.
repo/trl/experimental/openreward/_spec.py:258 
        key = self._api_key or os.environ.get("OPENREWARD_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61034ce333583196 — Environment-variable access.
repo/trl/experimental/openreward/_spec.py:344 
        elif not self._is_url and "OPENREWARD_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0da5477a6985f05a — Environment-variable access.
repo/trl/experimental/openreward/_spec.py:345 
            kwargs["api_key"] = os.environ["OPENREWARD_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c453e4c6fe491ef6 — Environment-variable access.
repo/trl/experimental/openreward/environment.py:169 
            elif name and "OPENREWARD_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3aac25806cd56399 — Environment-variable access.
repo/trl/experimental/openreward/environment.py:170 
                client_kwargs["api_key"] = os.environ["OPENREWARD_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e230511c74d81221 — Filesystem access.
repo/trl/experimental/ppo/modeling_value_head.py:379 
                with open(index_file_name) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b875b97bd22cce2a — Environment-variable access.
repo/trl/generation/vllm_generation.py:335 
            os.environ["RANK"] = str(accelerator.process_index)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7280533c59e20ae9 — Environment-variable access.
repo/trl/generation/vllm_generation.py:336 
            os.environ["LOCAL_RANK"] = str(accelerator.local_process_index)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2244375a0bd3b101 — Environment-variable access.
repo/trl/generation/vllm_generation.py:337 
            os.environ["WORLD_SIZE"] = str(accelerator.num_processes)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed63b2a4602761a1 — Filesystem access.
repo/trl/scripts/_hf_argparser.py:359 
                    file_args += args_file.read_text().split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad201c1f37619fc3 — Filesystem access.
repo/trl/scripts/_hf_argparser.py:429 
        with open(Path(json_file), encoding="utf-8") as open_json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60710889b7f79169 — Filesystem access.
repo/trl/scripts/_hf_argparser.py:453 
        outputs = self.parse_dict(yaml.safe_load(Path(yaml_file).read_text()), allow_extra_keys=allow_extra_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a483c2f95ef2299 — Filesystem access.
repo/trl/scripts/utils.py:326 
            with open(config_path) as yaml_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d4b4ca457400cec — Environment-variable access.
repo/trl/scripts/utils.py:335 
                    os.environ[key] = str(value)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d270f2069881009c — Environment-variable access.
repo/trl/scripts/vllm_serve.py:33 
os.environ["VLLM_WORKER_MULTIPROC_METHOD"] = "spawn"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b4dc8257faf52d1 — Environment-variable access.
repo/trl/scripts/vllm_serve.py:338 
    os.environ["VLLM_DP_RANK"] = str(data_parallel_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ef098882d51faeb — Environment-variable access.
repo/trl/scripts/vllm_serve.py:339 
    os.environ["VLLM_DP_RANK_LOCAL"] = str(data_parallel_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3598ab97330bb5fa — Environment-variable access.
repo/trl/scripts/vllm_serve.py:340 
    os.environ["VLLM_DP_SIZE"] = str(script_args.data_parallel_size)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79f9d873cf294476 — Environment-variable access.
repo/trl/scripts/vllm_serve.py:341 
    os.environ["VLLM_DP_MASTER_PORT"] = str(master_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d67d2d2b212127d — Environment-variable access.
repo/trl/trainer/base_trainer.py:78 
        if not self.accelerator.is_main_process or os.environ.get("CI"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5decbc9ceccbdeb9 — Environment-variable access.
repo/trl/trainer/base_trainer.py:160 
        if "JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35327dd390af40b7 — Environment-variable access.
repo/trl/trainer/grpo_trainer.py:538 
        if rollout_func is not None and os.environ.get("TRL_EXPERIMENTAL_SILENCE", "0") != "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a51c5a67fde4d37b — Environment-variable access.
repo/trl/trainer/grpo_trainer.py:547 
        if environment_factory is not None and os.environ.get("TRL_EXPERIMENTAL_SILENCE", "0") != "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c216b1456681a75 — Filesystem access.
repo/trl/trainer/grpo_trainer.py:3236 
            with open(os.path.join(output_dir, "entropy_ctrl_state.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a2cc560f903af4b — Filesystem access.
repo/trl/trainer/grpo_trainer.py:3244 
                with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5daed4b9a8c647d6 — Filesystem access.
repo/trl/trainer/reward_trainer.py:428 
                with open(args.chat_template_path, encoding="utf-8") as chat_template_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cb593e55e0e9cee — Filesystem access.
repo/trl/trainer/sft_trainer.py:1022 
                with open(args.chat_template_path, encoding="utf-8") as chat_template_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8783e564ce58449 — Environment-variable access.
repo/trl/trainer/utils.py:101 
    os.environ["MASTER_ADDR"] = os.environ.get("MASTER_ADDR") or addr or "localhost"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ffc6371538c18fbc — Environment-variable access.
repo/trl/trainer/utils.py:103 
    env_port = os.environ.get("MASTER_PORT", "").strip().lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #096102ec81cf9680 — Environment-variable access.
repo/trl/trainer/utils.py:110 
    os.environ["MASTER_PORT"] = str(_find_free_port() if port in (None, 0) else port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

openreward

python dependency
high pii_flow dependency Excluded from app score #4df89b3bdf60bf70 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/openreward/cli.py:268 · flow /tmp/closeopen-0feeonax/pkgs/python/[email protected]/openreward/cli.py:257 → /tmp/closeopen-0feeonax/pkgs/python/[email protected]/openreward/cli.py:268 
        req = urllib.request.Request(url, data=data, headers=headers, method=method)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow dependency Excluded from app score #ce5f4effeb1224f6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/openreward/cli.py:272 · flow /tmp/closeopen-0feeonax/pkgs/python/[email protected]/openreward/cli.py:257 → /tmp/closeopen-0feeonax/pkgs/python/[email protected]/openreward/cli.py:272 
        with urllib.request.urlopen(req) as resp:

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry dependency Excluded from app score #64bd6510ea6970a0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/openreward/environments/_metrics.py:26 
from opentelemetry import metrics as otel_metrics

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a03ad30eed36e3c4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/openreward/environments/_metrics.py:27 
from opentelemetry.exporter.otlp.proto.grpc.metric_exporter import OTLPMetricExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #fdcffdd37b4108a1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/openreward/environments/_metrics.py:28 
from opentelemetry.metrics import Counter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #9f2475921222b573 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/openreward/environments/_metrics.py:29 
from opentelemetry.sdk.metrics import MeterProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #04d511b2d0d8edd0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/openreward/environments/_metrics.py:30 
from opentelemetry.sdk.metrics.export import PeriodicExportingMetricReader

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #e3db93c54929ee11 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/openreward/environments/_metrics.py:31 
from opentelemetry.sdk.resources import Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 34 low-confidence finding(s)
low egress dependency Excluded from app score #5f889a4545b9d312 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/openreward/_update_check.py:30 
        req = urllib.request.Request(_PYPI_URL, headers={"Accept": "application/json"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #203c944471de3774 — Environment-variable access.
pkgs/python/[email protected]/openreward/_update_check.py:75 
    if os.getenv(_DISABLE_ENV_VAR):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43395ef70864abf9 — Environment-variable access.
pkgs/python/[email protected]/openreward/api/rollouts/rollout.py:53 
    return os.getenv("OPENREWARD_ROLLOUT_LOGGING_FORMAT", "pretty").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08139ec95a693b9f — Filesystem access.
pkgs/python/[email protected]/openreward/api/sandboxes/client.py:168 
        file_content = local_path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60326752f9e7dd53 — Environment-variable access.
pkgs/python/[email protected]/openreward/api/sandboxes/secrets.py:32 
        host = urlparse(os.getenv(env_name, default)).hostname

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfb3d6a100417178 — Filesystem access.
pkgs/python/[email protected]/openreward/cli.py:83 
    return file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #888b11fdef1f4304 — Filesystem access.
pkgs/python/[email protected]/openreward/cli.py:218 
    path.write_text(contents, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e8a322fa8e52948 — Environment-variable access.
pkgs/python/[email protected]/openreward/cli.py:227 
    api_key = os.environ.get("OPENREWARD_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61c7d05d531c0154 — Environment-variable access.
pkgs/python/[email protected]/openreward/cli.py:257 
    base_url = os.environ.get("OPENREWARD_URL", "https://openreward.ai")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63db8cf7ebc3e83c — Environment-variable access.
pkgs/python/[email protected]/openreward/cli.py:258 
    api_url = (os.environ.get("OPENREWARD_API_URL") or _api_base_url(base_url)).rstrip("/")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f603ca8ba2662ba — Environment-variable access.
pkgs/python/[email protected]/openreward/cli.py:326 
    base_url = os.environ.get("OPENREWARD_URL", "https://openreward.ai")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05d7253ffe2cf114 — Filesystem access.
pkgs/python/[email protected]/openreward/cli.py:943 
    data = file_path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb9750216914aab6 — Environment-variable access.
pkgs/python/[email protected]/openreward/cli.py:1219 
    api_key = os.environ.get("OPENREWARD_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cacdc99deffd750 — Environment-variable access.
pkgs/python/[email protected]/openreward/cli.py:1306 
        base_url = os.environ.get("OPENREWARD_URL", "https://openreward.ai")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #462f53de55f3cff5 — Environment-variable access.
pkgs/python/[email protected]/openreward/cli.py:1375 
    base_url = os.environ.get("OPENREWARD_URL", "https://openreward.ai")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48eafa8307ced11b — Environment-variable access.
pkgs/python/[email protected]/openreward/client.py:27 
        self.api_key = api_key or os.getenv(OPENREWARD_API_KEY_ENV_VAR_NAME, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25db2bf20581cad2 — Environment-variable access.
pkgs/python/[email protected]/openreward/client.py:30 
        base_url = base_url or os.getenv("OPENREWARD_URL", DEFAULT_BASE_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e98a9a15822415dc — Environment-variable access.
pkgs/python/[email protected]/openreward/client.py:34 
        self.base_url = os.getenv("OPENREWARD_API_URL") or _prepend_subdomain(base_url, "api")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d35c7348133f3f35 — Environment-variable access.
pkgs/python/[email protected]/openreward/client.py:35 
        self.session_base_url = os.getenv("OPENREWARD_SESSION_URL") or _prepend_subdomain(base_url, "sessions")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4051211ce3ad5a10 — Environment-variable access.
pkgs/python/[email protected]/openreward/environments/_metrics.py:50 
    override = os.environ.get("OPENREWARD_OTLP_INSECURE", "").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62cf1b7384ad4c76 — Environment-variable access.
pkgs/python/[email protected]/openreward/environments/_metrics.py:85 
    endpoint = endpoint or os.environ.get("OPENREWARD_OTLP_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d60926e3f069251 — Environment-variable access.
pkgs/python/[email protected]/openreward/environments/server.py:341 
            return {"version": __version__, "build_sha": os.getenv("OPENREWARD_BUILD_SHA")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34352e0d1917c1ef — Environment-variable access.
pkgs/python/[email protected]/openreward/environments/server.py:631 
            build_sha=os.getenv("OPENREWARD_BUILD_SHA"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b46d5d8f5f870ce — Environment-variable access.
pkgs/python/[email protected]/openreward/log_utils.py:9 
OPENREWARD_USE_STRUCTURED_LOGS = bool(os.getenv("OPENREWARD_USE_STRUCTURED_LOGS", False))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #436c99b06b928f32 — Environment-variable access.
pkgs/python/[email protected]/openreward/log_utils.py:13 
_openreward_build_sha = os.getenv("OPENREWARD_BUILD_SHA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc158214cb8b78df — Environment-variable access.
pkgs/python/[email protected]/openreward/log_utils.py:41 
    raw = os.environ.get("OPENREWARD_LOG_LEVEL") or os.environ.get("LOG_LEVEL") or "INFO"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cc62fd90cb14878 — Environment-variable access.
pkgs/python/[email protected]/openreward/toolsets/backsearch.py:151 
        return src or os.getenv("OPENREWARD_WEB_AS_OF") or None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #697bbae9e4449161 — Environment-variable access.
pkgs/python/[email protected]/openreward/web_service.py:142 
        api_key = os.getenv("OPENREWARD_API_KEY", "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a6c95bf940ab6aa — Environment-variable access.
pkgs/python/[email protected]/openreward/web_service.py:145 
        skip_preflight = os.getenv("OPENREWARD_WEB_SKIP_PREFLIGHT", "").lower() in _TRUTHY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #290aa77fd3052c76 — Environment-variable access.
pkgs/python/[email protected]/openreward/web_service.py:146 
        hosts_raw = os.getenv("OPENREWARD_WEB_PREAPPROVED_HOSTS", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d0ccf3b35fc76ac — Environment-variable access.
pkgs/python/[email protected]/openreward/web_service.py:150 
        as_of = os.getenv("OPENREWARD_WEB_AS_OF", "").strip() or None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1e9cfaac3cc4b52 — Environment-variable access.
pkgs/python/[email protected]/openreward/web_service.py:153 
            fetch_url=os.getenv("OPENREWARD_WEB_FETCH_URL", _DEFAULT_FETCH_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f88dc5c1dbaacb18 — Environment-variable access.
pkgs/python/[email protected]/openreward/web_service.py:154 
            search_url=os.getenv("OPENREWARD_WEB_SEARCH_URL", _DEFAULT_SEARCH_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76c90ed58ecaa9b1 — Environment-variable access.
pkgs/python/[email protected]/openreward/web_service.py:155 
            domain_info_url=os.getenv("OPENREWARD_WEB_DOMAIN_INFO_URL", _DEFAULT_DOMAIN_INFO_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

transformers

python dependency
high pii_flow dependency Excluded from app score #142e2bdb7d5696cd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2561 · flow /tmp/closeopen-0feeonax/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 → /tmp/closeopen-0feeonax/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2561 
            req = urllib.request.Request(url, data=data, headers=headers, method="POST")

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow dependency Excluded from app score #5e39d4ae38aa66ce — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2562 · flow /tmp/closeopen-0feeonax/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 → /tmp/closeopen-0feeonax/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2562 
            with urllib.request.urlopen(req, timeout=5, context=self._get_ssl_context()) as resp:

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow dependency Excluded from app score #55c306b5c6d5f103 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/utils/hub.py:178 · flow /tmp/closeopen-0feeonax/pkgs/python/[email protected]/src/transformers/utils/hub.py:178 → /tmp/closeopen-0feeonax/pkgs/python/[email protected]/src/transformers/utils/hub.py:178 
        instance_data = httpx.get(os.environ["ECS_CONTAINER_METADATA_URI"]).json()

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 382 low-confidence finding(s)
low env_fs dependency Excluded from app score #977d3dae84534014 — Filesystem access.
pkgs/python/[email protected]/setup.py:311 
        with open(target, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #254afd31823f6e8e — Filesystem access.
pkgs/python/[email protected]/setup.py:331 
        long_description=open("README.md", "r", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a252c972f4ee7dbb — Filesystem access.
pkgs/python/[email protected]/src/transformers/audio_utils.py:320 
            with open(audio, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3e4f1eef9ae729e — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:176 
    with open(file_name, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db91dfb966ccb2a7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:182 
    with open(file_name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d360675180ca382 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:228 
    autofile = (repo_path / "src" / "transformers" / "models" / "auto" / "auto_mappings.py").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19c9b0a9122868ea — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:246 
                file = (repo_path / "src" / "transformers" / "models" / "auto" / filename).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff9aa6505ba56e30 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:333 
    with open(toc_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #253296ac5d0923b8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:392 
    with open(module_name, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60cf7228a2a0aa3a — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:517 
            with open(original_test_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff11c3d3e086d645 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:567 
    with open(new_module_folder / f"modular_{new_lowercase_name}.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36002b2c87da0af9 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:572 
    with open(new_module_folder / "__init__.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a635417718b9ab6c — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:589 
    with open(tests_folder / "__init__.py", "w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1006d39b58a78908 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:593 
        with open(tests_folder / filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf38c1c6bf77a6df — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:598 
    with open(repo_path / "docs" / "source" / "en" / "model_doc" / f"{new_lowercase_name}.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9df60c23cb5330a5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/chat.py:363 
            with open(examples_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f5f4e4ba687691f — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/chat.py:659 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #537bf58afbe8fe61 — Filesystem access.
pkgs/python/[email protected]/src/transformers/configuration_utils.py:911 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #824837e9fa61884f — Filesystem access.
pkgs/python/[email protected]/src/transformers/configuration_utils.py:1115 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d93e09eb79ce75cc — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:159 
        with open(model, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8043551a8e10322c — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:706 
        with open(self.original_tokenizer.vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f44d8b8e769d76a — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1713 
        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e5a5f666cbcd506 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1753 
        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d89aa8655d716a33 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1843 
        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04ed07f7eab01d19 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:2003 
        with open(self.vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63f2e249781158b0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:576 
        with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25a737857e4e3670 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:580 
        with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f6142d324f71ede — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:584 
        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da91912dfd001088 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:769 
    with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9453e03c6793847b — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:772 
    with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #362573cf1916ac14 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:776 
        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d5c8ac0f8125b9f — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/processors/squad.py:515 
        with open(
            os.path.join(data_dir, self.train_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef0e2dfc4a5f67da — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/processors/squad.py:536 
        with open(
            os.path.join(data_dir, self.dev_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #befe152572531383 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/processors/utils.py:119 
        with open(input_file, "r", encoding="utf-8-sig") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #702df91ba8294629 — Filesystem access.
pkgs/python/[email protected]/src/transformers/distributed/configuration_utils.py:86 
        with open(json_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a6cad4dfbfad21b — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:133 
    with open(module_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #422bd49983590496 — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:186 
    with open(filename, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8e65c2be0d2f824 — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:298 
        module_hash: str = hashlib.sha256(b"".join(bytes(f) + f.read_bytes() for f in module_files)).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b72396e18072ae7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:341 
        source_files_hash.update(file_path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21ff55d33de05728 — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:813 
        with open(requirements, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab77b7b8d180f43d — Filesystem access.
pkgs/python/[email protected]/src/transformers/feature_extraction_utils.py:611 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf85f200869f74f3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/feature_extraction_utils.py:639 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3e53372c6f5dfff — Filesystem access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1072 
        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #043a1bf695fb274f — Filesystem access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1235 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2a9a9b35a94dd0e — Filesystem access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1356 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e08f7b281674bfa — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1802 
        graph_mixing_supported = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT", "1") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19b8f8ea2c906640 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1803 
        distributed = int(os.environ.get("WORLD_SIZE", "1")) > 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64f2d50d338b8349 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1808 
            os.environ.setdefault("NCCL_GRAPH_MIXING_SUPPORT", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35a71bca98b68ea1 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/continuous_batching/distributed.py:160 
        graph_mixing_not_disabled = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT") != "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d152417e4e8ed1eb — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/utils.py:2144 
            os.environ["TOKENIZERS_PARALLELISM"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d8b5021a1644861 — Filesystem access.
pkgs/python/[email protected]/src/transformers/hf_argparser.py:333 
                    file_args += args_file.read_text().split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec4c2ab9c808e541 — Filesystem access.
pkgs/python/[email protected]/src/transformers/hf_argparser.py:403 
        with open(Path(json_file), encoding="utf-8") as open_json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3efcde4b1b3f4d47 — Filesystem access.
pkgs/python/[email protected]/src/transformers/hf_argparser.py:425 
        outputs = self.parse_dict(yaml.safe_load(Path(yaml_file).read_text()), allow_extra_keys=allow_extra_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2af50e58fa41f17 — Filesystem access.
pkgs/python/[email protected]/src/transformers/image_processing_base.py:417 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03c12909a72ab7b7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/image_processing_base.py:445 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4e454cf1efb9422 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/accelerate.py:115 
                local_rank = int(os.environ.get("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8b9b11bbc45e4a2 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/finegrained_fp8.py:254 
        and os.environ.get("TRANSFORMERS_DISABLE_DEEPGEMM_LINEAR", "0") != "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf3dde34185320c9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/fsdp.py:51 
            and strtobool(os.environ.get("ACCELERATE_USE_FSDP", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfa3dcd3268870e6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/fsdp.py:52 
            and strtobool(os.environ.get("FSDP_CPU_RAM_EFFICIENT_LOADING", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e1badacaf939b00 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/hub_kernels.py:80 
    _TRANSFORMERS_USE_HUB_KERNELS = os.environ.get("USE_HUB_KERNELS", "YES").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e95e146d2c672402 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:40 
if os.getenv("WANDB_MODE") == "offline":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd9179efdfe95205 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:176 
    if os.getenv("DISABLE_MLFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d35804f7ae5cd736 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:212 
    if os.getenv("DISABLE_KUBEFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82dc78221e958e76 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:214 
    return os.getenv("KUBEFLOW_TRAINER_SERVER_URL") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93cf924e340c4167 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:436 
    ray_scope = os.getenv("RAY_SCOPE", "last")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e5af09a713b61ea — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:602 
        self.logging_dir = os.getenv("TENSORBOARD_LOGGING_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64645ea167d12abd — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:664 
    with open(f"{output_dir}/model_architecture.txt", "w+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fa3f16d6eb635fe — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:709 
        self._log_model = WandbLogModel(os.getenv("WANDB_LOG_MODEL", "false"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34877dc8b9bb2c12 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:763 
                    project=os.getenv("WANDB_PROJECT", "huggingface"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de2ffee25e2be48b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:775 
            _watch_model = os.getenv("WANDB_WATCH", "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a799e6266b458b5a — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:815 
                                fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5c1eeba9ce44a2d — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:878 
                            fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c94221b132277b0a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1170 
        log_assets = os.getenv("COMET_LOG_ASSETS", "FALSE").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f04fa57be3dac50 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1174 
            comet_old_mode = os.getenv("COMET_MODE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43c2818ae9021cbc — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1334 
        self._log_artifacts = os.getenv("HF_MLFLOW_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc050f5505b5c17f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1335 
        self._nested_run = os.getenv("MLFLOW_NESTED_RUN", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e5489c2bd8bb2d9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1336 
        self._tracking_uri = os.getenv("MLFLOW_TRACKING_URI", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c92eb226f55a67d2 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1337 
        self._experiment_name = os.getenv("MLFLOW_EXPERIMENT_NAME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3996be8498b25cba — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1338 
        self._flatten_params = os.getenv("MLFLOW_FLATTEN_PARAMS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fe9520862d7bb20 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1339 
        self._run_id = os.getenv("MLFLOW_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86d8d2f82802ae6d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1340 
        self._max_log_params = os.getenv("MLFLOW_MAX_LOG_PARAMS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4d07ba4ac1c7b62 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1403 
            mlflow_tags = os.getenv("MLFLOW_TAGS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4a5ac7f4313f923 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1487 
        self.log_artifacts = os.getenv("HF_DAGSHUB_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4e057231881607d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1488 
        self.name = os.getenv("HF_DAGSHUB_MODEL_NAME") or "main"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45d55f4f38be89c3 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1489 
        self.remote = os.getenv("MLFLOW_TRACKING_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4de2cf9a4d1e55b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1493 
            branch=os.getenv("BRANCH") or "main",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78a919ba1f449a96 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1908 
                    self._log_model = os.getenv(
                        "CLEARML_LOG_MODEL",
                        "FALSE" if not ClearMLCallback._task_created_in_callback else "TRUE",
                    ).upper() in ENV_VARS_TRUE_VALUES.union({"TRUE"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6af296a3464005c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1915 
                        project_name=os.getenv("CLEARML_PROJECT", "HuggingFace Transformers"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e06bb56a5ce6ba9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1916 
                        task_name=os.getenv("CLEARML_TASK", "Trainer"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc4acc4e50cea643 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1920 
                    self._log_model = os.getenv("CLEARML_LOG_MODEL", "TRUE").upper() in ENV_VARS_TRUE_VALUES.union(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5d23a194f386734 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2189 
            log_model_env = os.getenv("HF_DVCLIVE_LOG_MODEL", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60b43517ea42c693 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2271 
        self._log_model = os.getenv("SWANLAB_LOG_MODEL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bdc530d31ab3915a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2342 
            init_args["project"] = os.getenv("SWANLAB_PROJECT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7b7d015ba3a6580 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2344 
            run_id = os.getenv("SWANLAB_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c3de6b5a7b2c18d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2348 
            resume = os.getenv("SWANLAB_RESUME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #260303b1aa4c1065 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2494 
        ca_file = os.environ.get(self._ENV_CA_CERT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85c05b980eb6f145 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 
        token_path = os.environ.get(self._ENV_TOKEN_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9155199774ac014 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2518 
            with open(token_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #565c5040253a56f5 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 
            url = os.environ.get(self._ENV_SERVER_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e88edcd4f204c5d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/mxfp4.py:417 
        rank = int(os.environ.get("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1ba85dfb994f877 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/npu_flash_attention.py:30 
SPARSE_MODE = int(os.getenv("NPU_FA2_SPARSE_MODE", default=DOWN_RIGHT_ALIGNED_CAUSAL_MASK_MODE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d686c886629590e — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/peft.py:708 
        with open(_adapter_model_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c35586249528d605 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:77 
                rank = int(os.environ["RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4de9f4c9aa24d1f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:78 
                local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19b12831a08ea2cb — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:79 
                world_size = int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1bff507cae964fe — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:103 
            current_device.set_device(int(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2b910ad01837e23 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:122 
        device_map = torch.device(f"{device_mesh.device_type}:{int(os.environ['LOCAL_RANK'])}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32ad1e0c08c2205f — Filesystem access.
pkgs/python/[email protected]/src/transformers/model_debugging_utils.py:243 
    with open(full_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af57fe6ac01d98ac — Filesystem access.
pkgs/python/[email protected]/src/transformers/model_debugging_utils.py:266 
    with open(summary_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b86f8df61d3cc61 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_flash_attention_utils.py:655 
            deterministic if deterministic is not None else os.getenv("FLASH_ATTENTION_DETERMINISTIC", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c141ba2b0efd224c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:163 
XLA_USE_BF16 = os.environ.get("XLA_USE_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99d4f4235bd90316 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:164 
XLA_DOWNCAST_BF16 = os.environ.get("XLA_DOWNCAST_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ae597f05f4860f2 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:213 
    return _is_torch_distributed_initialized() and int(os.environ.get("LOCAL_RANK", "-1")) == 0

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77f129a577143c69 — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:323 
        with open("/proc/mounts", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54b9a5a18cf0ff92 — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:356 
            with open(checkpoint_path, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4334bc9dca4d0ec — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:3617 
            with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fba213cf6a09fec — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:4180 
        if device_map == "auto" and int(os.environ.get("WORLD_SIZE", "0")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e3f0919ce2f59b5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:4482 
                        with open(file, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8046696149a2288 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/auto_factory.py:311 
                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab26174ceda8486e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/processing_auto.py:273 
                with open(tokenizer_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #605adc64ff1996e4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:434 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abc81f078e870e20 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:441 
    with open(merges_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06f5e37c0849d70b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:612 
    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6373ae60290d5b20 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bark/processing_bark.py:101 
                with open(speaker_embeddings_path) as speaker_embeddings_json:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8860e0eae4f02548 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bark/processing_bark.py:161 
            with open(os.path.join(save_directory, speaker_embeddings_dict_path), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1186618e88985bb5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:133 
        with open(monolingual_vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #baabf7b79ff1544d — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:306 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e3f7f185cde56b8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:315 
            with open(out_monolingual_vocab_file, "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9794484f697bee4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert.py:33 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7043d8127f0f1dca — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert_legacy.py:32 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01375da7da74eb0b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert_legacy.py:245 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c95695dcbbe33bab — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:41 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e7ac5aaef8b7777 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:278 
            with open(vocab_file, "wb") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b43eceac07140ec — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:282 
            with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fa8447fef2df217 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:142 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e557ed5297ef6930 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:316 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fcd2852d7d28b7c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:324 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e98179dd18633839 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:338 
                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6580933987a504b7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:116 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f68b12ea96478988 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:119 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d0583ec4e1d5abb — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:293 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34bd4a8e60596b29 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:297 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecf665caea30d7fe — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:89 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5abea8d43cb3ba83 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:92 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #773db125613487a4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:203 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #307c9432dcfa261b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:207 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0aceeb78fcbf83c5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/clvp/tokenization_clvp.py:149 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0053785c7037aa84 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/clvp/tokenization_clvp.py:155 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14412c220413b86a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/cpm/tokenization_cpm.py:324 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #087d04a89c9a92c5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/cpmant/tokenization_cpmant.py:37 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fa00351864d5841 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/cpmant/tokenization_cpmant.py:219 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77264d5844280b9f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/ctrl/tokenization_ctrl.py:128 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11b80f6894a521f1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/ctrl/tokenization_ctrl.py:131 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #398ecb1e8ff6424b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/esm/openfold_utils/residue_constants.py:417 
    stereo_chemical_props = resources.read_text("openfold.resources", "stereo_chemical_props.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e40c86c5546a78e6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/esm/tokenization_esm.py:28 
    with open(vocab_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #683d89909c1e4924 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/esm/tokenization_esm.py:136 
        with open(vocab_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8938b6aef2d3c0b4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:65 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5b062ad968d576e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:163 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e19dd132dbadc7e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:237 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67d5614fcf352bb2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:240 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3bc7c84c58e9036 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:498 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0c96b26e707ea5e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:502 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5eb0f8f8819c89e0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:204 
        with open(src_vocab_file, encoding="utf-8") as src_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c027273809265f94 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:206 
        with open(tgt_vocab_file, encoding="utf-8") as tgt_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83044423fa586e46 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:209 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36e6f7d7528349d8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:446 
        with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11787caaedebfa9b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:449 
        with open(tgt_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63894a0e225d86e1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:454 
        with open(merges_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b3920f8560bb8a8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:35 
    with open(emoji_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2509a5baadbb6fd1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:41 
    with open(vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6909820936051f70 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:180 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2042dc9524ad7a92 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:190 
        with open(emoji_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3cbed2fafcb55ec — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/luke/tokenization_luke.py:287 
            with open(entity_vocab_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6fb4c2568d735d7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:311 
            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e1816465f906d5d — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:375 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4531725ec21631e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:380 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99ea11650f5ba9f6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:352 
                with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b14f28950a1a3b7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:416 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1596a5af0d83672 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:421 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d3bb7fe5928da47 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:598 
        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c137e92fbed22567 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:651 
    with open(tracker_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1444bd92dd1e608f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mgp_str/tokenization_mgp_str.py:53 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fecd31e2a7823ad — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mgp_str/tokenization_mgp_str.py:97 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86a3c26dea084782 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mluke/tokenization_mluke.py:308 
            with open(entity_vocab_file, encoding="utf-8") as entity_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60a1071d2def5213 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mluke/tokenization_mluke.py:1713 
        with open(entity_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1fdf8966d598460 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:46 
            with open(rewriting_rules, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10850eb56c2a6fcc — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:195 
        self.byte_maps = json.load(open(vocab_file, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #392f9698047d15d2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:373 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #998aa65694a9b760 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/oneformer/image_processing_oneformer.py:95 
    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9151cb1c5d75ba6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/oneformer/image_processing_pil_oneformer.py:241 
    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe153a1a48bb324e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:126 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fe1b0cc37aabc42 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:310 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2fc70c2de875b43 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:331 
                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a2d64fd09d67d83 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/pop2piano/tokenization_pop2piano.py:111 
        with open(vocab, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84774dc3cf1a068d — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/pop2piano/tokenization_pop2piano.py:358 
        with open(out_vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee48556ca3d5dbb8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/prophetnet/tokenization_prophetnet.py:259 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #459456f6b0ebb2d5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/prophetnet/tokenization_prophetnet.py:438 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #693e9f890bdff799 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:134 
        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fa100e41946a56a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:141 
        with open(passages_path, "rb") as passages_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2918adac71f3ca1f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:150 
        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c3d60f5c21ade41 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:157 
        with open(resolved_meta_path, "rb") as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #251b765895a11490 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:52 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40309df747629e81 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:139 
        with open(word_shape_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20a42281734040ef — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:142 
        with open(word_pronunciation_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea9b257bf2dd5c87 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1077 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80f550a14ea40bfb — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1088 
        with open(word_shape_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce993931e288a35c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1091 
        with open(word_pronunciation_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57016e0c83b3372d — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/siglip/tokenization_siglip.py:345 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #188a537c1c54529b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:271 
            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bba767e41c5306f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:285 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc29a599d654bab8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:290 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16efaae19ec7b86f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/splinter/tokenization_splinter.py:33 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97c64b34b5726377 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/tapas/tokenization_tapas.py:91 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3df8ef06561c94a9 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/tapas/tokenization_tapas.py:394 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f49c776919352dd7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/vits/tokenization_vits.py:83 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71c8f3001f7bbfe5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/vits/tokenization_vits.py:242 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9af6fcad3a5a587a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:154 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9473d0c57f98766c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:647 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #918470b7efa8bbf5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:138 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8885053522cd842 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:575 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4adf94b8a4d4c5dc — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:266 
            with open(normalizer_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36b42ba2167b4d8d — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:560 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d4c23f1dc5e12ae — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:563 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db4ea9639c4c19d0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:568 
            with open(normalizer_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #119a9d9664c6f483 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:244 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42fea8a126d3ebb6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:247 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3582db75c0fe7c1c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:541 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28c4c57713422c57 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:545 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de742fe111c903d5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/__init__.py:921 
                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfd3ec2bd3d44704 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/audio_classification.py:174 
                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d81470eb30cc12f1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/automatic_speech_recognition.py:352 
                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcff59755f30876c — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:457 
        with open(binary_path, "wb+") as f_output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e30dcb6a797052e8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:520 
        with open(self.input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c4f0377a5ea1c4e — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:535 
        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ff0bec6b85a4f35 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:563 
        with open(input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #281fd36fe41840b5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:580 
        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f22005cf0a765421 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1193 
        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d6db95d1a48173c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1195 
            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #becd8cf9a8421b7c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1313 
        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac10642dd68be31d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1315 
            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00284c67d8e37648 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/zero_shot_audio_classification.py:111 
                with open(audio, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba151dfc36003701 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1086 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1f6f3e08297ac7e — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1166 
            with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66d465bc3200b2ff — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1174 
                    with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c6940cf30ea7e81 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1183 
                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #229a0c0abfb07d25 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1371 
            with open(resolved_chat_template_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50913cc2eac88631 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1383 
                template_name: open(template_file, "r", encoding="utf-8").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0614ed8b28ea0a4d — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1387 
                with open(resolved_raw_chat_template_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18b7bfc71ba9d66b — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1402 
                with open(resolved_processor_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c9580b428444a53 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1428 
                reader = open(resolved_audio_tokenizer_file, "r", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a2bf149cddfa49e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:288 
        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b02228b318b3269 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:304 
        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a061a72e47ed5494 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1092 
    if "TRANSFORMERS_TEST_BACKEND" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80421136ed23ee54 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1093 
        backend = os.environ["TRANSFORMERS_TEST_BACKEND"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #691bf166d8b6a188 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1102 
    if "TRANSFORMERS_TEST_DEVICE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d66ceec28e2977e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1103 
        torch_device = os.environ["TRANSFORMERS_TEST_DEVICE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0faa7d8853ee8e08 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2165 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #744250f6056bccef — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2287 
            for k in list(os.environ.keys()):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1af3c15955620a58 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2289 
                    del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b722a92712c360b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2300 
    return mock.patch.dict(os.environ, kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6240ea3a0c6f388d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2315 
    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e0aeaf203cbff94 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2417 
        with open(report_files["durations"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6bdb5936f0a58bc — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2447 
    with open(report_files["failures_long"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #502936c8e1e0a7e1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2452 
    with open(report_files["failures_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d90dff0d6964faa6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2457 
    with open(report_files["failures_line"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #853f5cbba6cacd5c — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2461 
    with open(report_files["errors"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb16befc31d5455b — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2465 
    with open(report_files["warnings"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f576c829924ad595 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2479 
    with open(report_files["summary_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b5b4d44f72f4492 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2483 
    with open(report_files["stats"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d293b6958fbf073d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2583 
    worker = os.environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d7ca3b85eeab199 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2630 
    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6537700079bd2e62 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2832 
        timeout = int(os.environ.get("PYTEST_TIMEOUT", "600"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad7e99c65b5b2633 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2868 
        if os.getenv("_INSIDE_SUB_PROCESS", None) == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f408c8bc94886498 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2871 
            test = " ".join(os.environ.get("PYTEST_CURRENT_TEST").split(" ")[:-1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e771d0df076f61d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2873 
                env = copy.deepcopy(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab885665bac4db76 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2990 
    skip_cuda_tests: bool = os.environ.get("SKIP_CUDA_DOCTEST", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6178fca8b4e2191c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3228 
    if "TRANSFORMERS_TEST_DEVICE_SPEC" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e02a3182a63a1a8c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3229 
        device_spec_path = os.environ["TRANSFORMERS_TEST_DEVICE_SPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb2ff3e8f620ef65 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3252 
        if "TRANSFORMERS_TEST_DEVICE" in os.environ and torch_device != device_name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4bc74fe263a5b28 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3453 
    force_fullgraph = os.environ.get("TORCH_COMPILE_FORCE_FULLGRAPH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #140462d869d228eb — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3476 
    full_test_name = os.environ.get("PYTEST_CURRENT_TEST", "").split(" ")[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61b340fc06beb43a — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3556 
    with open(actual_test_file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3118660c937b977 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3562 
    with open(caller_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c00471b2dffab63c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3650 
    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec3fdf439321326e — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3652 
    with open(p, "a") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f060d899962b83a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3769 
        if not os.environ.get("PYTEST_CURRENT_TEST", ""):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ae62ee4637bb7dc — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3806 
            if os.getenv("CI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #631a7cd987d13abd — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3882 
    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1227a575142ce2d4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4236 
    with open(file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cd7be7d5364fa85 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4241 
    with open(file, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a059a8125619d9cb — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4477 
            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11093009082abb4f — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4486 
            with open(new_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #174ab40c697aa459 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_python.py:1397 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #739cb862a0f005d4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_python.py:1406 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddd00a7c2f6a201a — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1661 
                    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e97e35f57d379efc — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1780 
            with open(tokenizer_config_file, encoding="utf-8") as tokenizer_config_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8e6ccef03c6634e — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1799 
            with open(chat_template_file, encoding="utf-8") as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #931a7cbc07a18e9c — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1806 
            with open(template_file) as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9526fe7715406ca3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1875 
                with open(special_tokens_map_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45d0d7c2bc033e40 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1905 
                with open(added_tokens_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5837623d86daf478 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1918 
                with open(tokenizer_file, encoding="utf-8") as tokenizer_file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04ee5a52a9985211 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:2123 
        with open(tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6540e69082b2e05d — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:2176 
            with open(added_tokens_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4923b3cb9d526f71 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3314 
            with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0d276a9ba5b11b4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3325 
                    with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cf9f42ff71117ab — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3335 
                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cadf7bf1dc108e0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3608 
            with open(resolved_vocab_file, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fc14e21cfd7491c — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3634 
                with open(resolved_vocab_txt, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d649673533981b46 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3660 
            with open(resolved_merges_file, "r", encoding="utf-8") as mf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7841a84b4151b77 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_sentencepiece.py:260 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05eeb1803edd48fc — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_tokenizers.py:121 
            with open(fast_tokenizer_file, encoding="utf-8") as tokenizer_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #042b6ccfca0c746c — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_tokenizers.py:1335 
                with open(_config_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b438c492d524b1a1 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer.py:2459 
                model, device_ids=[int(os.getenv("SMDATAPARALLEL_LOCAL_RANK"))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6d9d450362e0d03 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer.py:4016 
        with open(model_card_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #192c7298a23d5cad — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer.py:4121 
                with open(index_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #985c421836e0bb72 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_callback.py:146 
        with open(json_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07e0ad2233a37e5b — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_callback.py:152 
        with open(json_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00b3962c6d42982a — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_jit_checkpoint.py:60 
            with open(sentinel_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1b8b00f2bed47dc — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:943 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f13c02a216fde3f — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:949 
            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9bb91d199ca7f3c4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:955 
        with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55249ab5851ecbf4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:166 
        os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2cc0f03bcf16496 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:167 
        os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #589b9d93f10b8bcd — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:169 
        os.environ["ASCEND_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a1c09ccf73308a7 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:170 
        os.environ["HCCL_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #209a7ddd9a89a8cf — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:172 
        os.environ["FLASH_ATTENTION_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb75634a34740250 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:1094 
    with open(load_index, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcf46080e01dd535 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:86 
    if os.environ.get("TORCHELASTIC_RUN_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0abc5096fb62ef9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1554 
        self.mixed_precision = os.environ.get("ACCELERATE_MIXED_PRECISION", "no")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15187be56867b7ab — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1572 
                os.environ["ACCELERATE_DYNAMO_BACKEND"] = self.torch_compile_backend

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85902b479c450808 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1574 
                    os.environ["ACCELERATE_DYNAMO_MODE"] = self.torch_compile_mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2689f615e5ff46c9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1646 
        elif strtobool(os.environ.get("ACCELERATE_USE_DEEPSPEED", "false")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8168150387c870b6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1806 
        if self.use_cpu or strtobool(os.environ.get("ACCELERATE_USE_CPU", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66e0b4d4ffc1e62c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1830 
                os.environ["ACCELERATE_USE_DEEPSPEED"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fe27bb81b42d95d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1833 
                del os.environ["ACCELERATE_USE_DEEPSPEED"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c91ba8ec970ddda — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1876 
                    "cuda:0" if torch.cuda.is_available() else os.environ.get("ACCELERATE_TORCH_DEVICE", "cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60dba2e9889145bc — Filesystem access.
pkgs/python/[email protected]/src/transformers/training_args.py:2691 
            with open(self.fsdp_config, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36e27acaae53f28b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:2758 
        os.environ["FSDP_CPU_RAM_EFFICIENT_LOADING"] = cpu_ram_efficient_loading

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #e994694ed394b164 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/transformers/utils/attention_visualizer.py:183 
            img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #3927f766bb5b17fa — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/generic.py:379 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #972a06fc7c3d13dc — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/generic.py:862 
        with open(pretrained_model_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1f1e632844556f7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/generic.py:868 
        with open(os.path.join(pretrained_model_path, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1de9c9a6de964bef — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:107 
HF_MODULES_CACHE = os.getenv("HF_MODULES_CACHE", os.path.join(constants.HF_HOME, "modules"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08da855e0c754092 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:178 
        instance_data = httpx.get(os.environ["ECS_CONTAINER_METADATA_URI"]).json()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27257eb3439b100b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:185 
    sagemaker_params = json.loads(os.getenv("SM_FRAMEWORK_PARAMS", "{}"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abb400b39a8940b1 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:187 
    training_job_arn = os.getenv("TRAINING_JOB_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e4aeff8d14e3a07 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:191 
        "sm_framework": os.getenv("SM_FRAMEWORK_MODULE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6788eba10f752b63 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:192 
        "sm_region": os.getenv("AWS_REGION", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e5dca85915730b5 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:193 
        "sm_number_gpu": os.getenv("SM_NUM_GPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa4c4b06fd97d824 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:194 
        "sm_number_cpu": os.getenv("SM_NUM_CPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6fce31b728e8296 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:215 
    if os.environ.get("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee735a56c880459d — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:879 
    with open(index_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da444c4eb870c249 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:118 
    return os.getenv(env_variable, "false").lower() in ("true", "1", "y", "yes", "on")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a810fcd527df2066 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:123 
    return os.getenv(env_variable, "true").lower() in ("false", "0", "n", "no", "off")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0285cba64c814e2b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:130 
USE_TORCH_XLA = os.environ.get("USE_TORCH_XLA", "1").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a68c6f8868df813c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:347 
    pytorch_cndev_based_mlu_check_previous_value = os.environ.get("PYTORCH_CNDEV_BASED_MLU_CHECK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c24460dc2bf48451 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:349 
        os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = str(1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a86dfa0bb4c0a1e7 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:353 
            os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = pytorch_cndev_based_mlu_check_previous_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4dcb2bff1c5192e4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:355 
            os.environ.pop("PYTORCH_CNDEV_BASED_MLU_CHECK", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c4f4d513218814e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:425 
    if os.environ.get("PT_HPU_LAZY_MODE", "1") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa9768c0f760f60b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1603 
    if os.getenv("TRANSFORMERS_DISABLE_TORCH_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d6467c3746f8373 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1652 
        if "DATABRICKS_RUNTIME_VERSION" in os.environ and os.environ["DATABRICKS_RUNTIME_VERSION"] < "11.0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f349ffd34252f02 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1664 
    sagemaker_params = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3776d9fcc5fc450d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1678 
    smp_options = os.getenv("SM_HP_MP_PARAMETERS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59a1d1350ece85dd — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1688 
    mpi_options = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f16fc3b57ef0f162 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1701 
    return "SAGEMAKER_JOB_NAME" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f90238839fecc3d6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:2813 
        with open(os.path.join(module_path, module_name), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d16e60fb41b41e4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:64 
    env_level_str = os.getenv("TRANSFORMERS_VERBOSITY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bf7b1ed06a7bd1e — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:94 
            sys.stderr = open(os.devnull, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1361f272d6de790 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:108 
        if os.getenv("TRANSFORMERS_VERBOSITY", None) == "detail":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc825994eebca78d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:114 
        ci = os.getenv("CI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #321054ed97582d21 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:322 
    no_advisory_warnings = os.getenv("TRANSFORMERS_NO_ADVISORY_WARNINGS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7b06fad3b6fa421 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:172 
        Path(dump_path).write_text(json.dumps(records), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81ccea67d0e2d719 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:182 
                records = json.loads(Path(record_file).read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20601c76ef82f521 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:327 
        report_path.write_text(json.dumps(self.build_report(), indent=2, sort_keys=True), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73bcdc0c0d0d6264 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:338 
    enabled_raw = os.environ.get("NETWORK_DEBUG_REPORT", "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef02b2e837412fd0 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:344 
    output_path = os.environ.get("NETWORK_DEBUG_REPORT_PATH", "").strip() or _DEFAULT_REPORT_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #217129ba655487a3 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/notebook.py:128 
        if "VSCODE_PID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7901ae992f1bd560 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/pytest_helpers.py:39 
    data = json.loads(p.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd4d143e285fd5ae — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/quantization_config.py:144 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9451c8df29653daa — Filesystem access.
pkgs/python/[email protected]/src/transformers/video_processing_utils.py:769 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ccd134160c0d529 — Filesystem access.
pkgs/python/[email protected]/src/transformers/video_processing_utils.py:789 
        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

harbor

python dependency
high pii_flow dependency Excluded from app score #927b0aae44c29f58 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/harbor/environments/novita.py:777 · flow /tmp/closeopen-0feeonax/pkgs/python/[email protected]/src/harbor/environments/novita.py:757 → /tmp/closeopen-0feeonax/pkgs/python/[email protected]/src/harbor/environments/novita.py:777 
        self._http_client = httpx.AsyncClient(
            base_url=self._api_base_url,
            headers={
                "X-API-KEY": self._api_key,
                "Content-Type": "application/json",
            },
            timeout=60.0,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 529 low-confidence finding(s)
low env_fs dependency Excluded from app score #5d552722e7bb8e46 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/computer_1/computer_1.py:646 
        tmp_path.write_text(format_trajectory_json(trajectory.to_json_dict()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44582557913bb564 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/computer_1/computer_1.py:801 
        self._timeout_template = (templates_dir / "timeout.txt").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #437c8b0f2d454510 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/computer_1/computer_1.py:1309 
            logging_paths.prompt.write_text(text_for_log)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #719546b7b38f7b61 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/computer_1/computer_1.py:1323 
                logging_paths.response.write_text(llm_response.content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e76e653306dbd7a — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/computer_1/providers/generic.py:331 
        self._prompt_template = (_TEMPLATES_DIR / "computer-1-json.txt").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #259269de6bfd3684 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/dspy_rlm.py:351 
        (logs_dir / "solution.txt").write_text(solution)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ed55ab373000ed3 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/dspy_rlm.py:355 
            (logs_dir / "trajectory.json").write_text(
                json.dumps(trajectory, indent=2, default=str)
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa2c0df8857c851b — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/dspy_rlm.py:361 
            (logs_dir / "final_reasoning.txt").write_text(str(final_reasoning))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e02185bfc75d44aa — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp.py:189 
        payload = json.loads(Path(registry_entry_path).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ffe4b09bb4ac876 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp.py:676 
        launcher_path.write_text(self._build_launcher_script(kind, target))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63c254ceafe29676 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp.py:734 
            payload = json.loads(summary_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0249c7beda07f8a — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp.py:747 
        for line in events_path.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61e6d9ba4ea83d57 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp.py:1152 
            trajectory_path.write_text(
                format_trajectory_json(trajectory.to_json_dict())
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7ba5845948f0d63 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_registry.py:34 
    github_token = os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e6a48dbc3f66d28 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_registry.py:79 
    target_path.write_text(json.dumps(payload, indent=2) + "\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e262b57bf434b40 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:193 
        if all(os.environ.get(var_name) for var_name in required_vars):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #814156a5b4403aba — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:369 
        target_path.write_text(content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0198f87a2d52c606 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:408 
            content = target_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8aca8a846e89b74f — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:451 
        env_vars = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7f4a0523bacd364 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:615 
    permission_mode = os.environ.get("HARBOR_ACP_PERMISSION_MODE", "allow")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72ba7be4204576d9 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:616 
    auth_policy = os.environ.get("HARBOR_ACP_AUTH_POLICY", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee9b84b8db94906e — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:617 
    authenticate_method_id = os.environ.get("HARBOR_ACP_AUTHENTICATE_METHOD_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2da35eb9e12fe742 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:618 
    requested_model = os.environ.get("HARBOR_ACP_REQUESTED_MODEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b961dd43a764e426 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:619 
    mcp_servers = json.loads(os.environ.get("HARBOR_ACP_MCP_SERVERS_JSON", "[]"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d890db5403a29e70 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:627 
        "registry_entry_id": os.environ.get("HARBOR_ACP_AGENT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e94f4d4f608fde1 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:628 
        "registry_entry_version": os.environ.get("HARBOR_ACP_AGENT_VERSION"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e33ab65d466f0e0d — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:635 
    child_env = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f36137a2839d3af8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/acp_runner.py:733 
        (logs_dir / "acp-summary.json").write_text(
            json.dumps(summary, indent=2, ensure_ascii=False)
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4aadf4a0beb20b8d — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/aider.py:120 
            api_key = os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77af81e02c444aec — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/aider.py:122 
            api_key = os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4baddcbc65852ab6 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/antigravity_cli.py:440 
        text = path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0843d2705a1e778 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/antigravity_cli.py:604 
                atif_path.write_text(
                    json.dumps(atif_trajectory.to_json_dict(), indent=2)
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3a5daac2d9aef2d — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/antigravity_cli.py:704 
            if var in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #110c5a6e321e68d7 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/antigravity_cli.py:705 
                env[var] = os.environ[var]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #012ce2f6fcb6fabe — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/base.py:283 
        if descriptor.env_fallback and descriptor.env_fallback in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf3dda94a8220d34 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/base.py:284 
            return os.environ[descriptor.env_fallback]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5886af5cab2cafc — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/base.py:342 
        return os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a5e5e7704357778 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/base.py:346 
        return key in self._extra_env or key in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f13ef7cfa5e3755 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/base.py:351 
        for key, value in os.environ.items():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9bfe8ab4b686569e — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:632 
            content = stream_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a44fa230625bceb1 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:663 
            with open(session_file, "r") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddb40b066b0daa70 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1192 
            with open(trajectory_path, "w", encoding="utf-8") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d7a77588a0c23d8 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1269 
        if os.environ.get("CLAUDE_CODE_USE_BEDROCK", "").strip() == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b587ec409e6c015b — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1271 
        if os.environ.get("AWS_BEARER_TOKEN_BEDROCK", "").strip():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5f4ca73f7e86224 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1324 
            "ANTHROPIC_BASE_URL": os.environ.get("ANTHROPIC_BASE_URL", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c7a369f32a1ba19 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1326 
            "CLAUDE_CODE_MAX_OUTPUT_TOKENS": os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7448d3ae54818db1 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1326 
            "CLAUDE_CODE_MAX_OUTPUT_TOKENS": os.environ.get(
                "CLAUDE_CODE_MAX_OUTPUT_TOKENS", None
            ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85a73170f26f8e94 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1338 
            bedrock_token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79c2570743525305 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1349 
                val = os.environ.get(aws_var, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1bd06d2c7ac9e8a — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1354 
            env["AWS_REGION"] = os.environ.get("AWS_REGION", "us-east-1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10e1be37791c971f — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1357 
            small_model_region = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd477f64316fc75c — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1357 
            small_model_region = os.environ.get(
                "ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION", ""
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #695146f9e59892da — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1364 
            if os.environ.get("DISABLE_PROMPT_CACHING", "").strip() == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #759b5f0870c2a9b4 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1387 
        elif "ANTHROPIC_MODEL" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e65ed2fd5a5251a3 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1388 
            env["ANTHROPIC_MODEL"] = os.environ["ANTHROPIC_MODEL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0498408db271f66 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/claude_code.py:1398 
        if os.environ.get("CLAUDE_CODE_DISABLE_ADAPTIVE_THINKING", "").strip() == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d5cae9617cc21a3 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/cline/cline.py:504 
            (setup_dir / f"{label}.log").write_text(body, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c6605b907bfa640 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/cline/cline.py:786 
            token_value = os.environ.get(token_env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee0a80f945616238 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/cline/cline.py:821 
            messages_doc = json.loads(session_file.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf6ff98437cc1706 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/cline/cline.py:837 
        trajectory_path.write_text(
            format_trajectory_json(trajectory.to_json_dict()), encoding="utf-8"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a692ba70108fb6f7 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/cline/cline.py:852 
            doc = json.loads(session_file.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba7296f613a0ee94 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/codex.py:555 
        with open(session_file, "r") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cd424f37d4e343b — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/codex.py:928 
            with open(trajectory_path, "w") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #041cfd0dc7696195 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/copilot_cli.py:141 
            text = jsonl_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c01277ad96428bee — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/copilot_cli.py:696 
                atif_path.write_text(
                    json.dumps(
                        trajectory.to_json_dict(),
                        indent=2,
                        ensure_ascii=False,
                    ),
                    encoding="utf-8",
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3280df43abdd644f — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/copilot_cli.py:726 
            os.environ.get("COPILOT_GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1331fcede8ce0a5 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/copilot_cli.py:727 
            or os.environ.get("GH_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdc16a744a63b805 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/copilot_cli.py:728 
            or os.environ.get("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71c73acdc49ee494 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/cursor_cli.py:249 
        for line in output_path.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b2b9326d4c97342 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/cursor_cli.py:627 
            trajectory_path.write_text(
                format_trajectory_json(trajectory.to_json_dict())
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d22c3debce6d6c5 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/cursor_cli.py:685 
        if "CURSOR_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0312f26bd63a1d19 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/cursor_cli.py:686 
            env["CURSOR_API_KEY"] = os.environ["CURSOR_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34470f246f95c3f5 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/devin.py:89 
            env={"WINDSURF_API_KEY": os.environ["WINDSURF_API_KEY"]},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48e24c03bfc92430 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/devin.py:309 
            trajectory_path.write_text(
                format_trajectory_json(trajectory.to_json_dict())
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #056c7efec0738287 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/eve.py:279 
            path.write_text(
                'import { defineMcpClientConnection } from "eve/connections";\n\n'
                "export default defineMcpClientConnection({\n"
                f"  url: {json.dumps(server.url)},\n"
                f"  description: {json.dumps(description)},\n"
                "});\n"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6196bad4fadbbdb9 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/eve.py:296 
            data = json.loads((self.path / "package.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93b318a74af1e49b — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/eve.py:344 
                texts.append(path.read_text(errors="ignore"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0691ba0a083e3e63 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/eve.py:402 
                    key: os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1f1dc2f47861022 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/eve.py:404 
                    if key in os.environ and self._ENV_NAME_RE.fullmatch(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e4d8a51fd9a28f0 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/eve.py:451 
        local_runner_copy.write_text(runner_script_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9d3bac34009f955 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/eve.py:563 
        instruction_path.write_text(instruction)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4270cceed77bbad1 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/eve.py:605 
        for line in path.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #566533f0b42238d4 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/eve.py:969 
                result = json.loads(result_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4861787e716440e — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/eve.py:1004 
            trajectory_path.write_text(
                format_trajectory_json(trajectory.to_json_dict())
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd56edfae0637b0d — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/gemini_cli.py:449 
        text = path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a536390d6e0b09b — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/gemini_cli.py:610 
                with open(atif_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2039a91812798f6d — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/gemini_cli.py:822 
                if var in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d19cf6ccded681a — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/gemini_cli.py:823 
                    env[var] = os.environ[var]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c064ce3db11ad027 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/goose.py:578 
        log_text = txt_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff0f60c298c11b5c — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/goose.py:602 
                atif_path.write_text(json.dumps(trajectory.to_json_dict(), indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1af8106e41693e1c — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/goose.py:649 
                api_key = os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dee1e18be856cf44 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/goose.py:654 
                api_key = os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbf78775df73aaa3 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/goose.py:659 
                host = os.environ.get("DATABRICKS_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f311f37c43b68a4 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/goose.py:663 
                token = os.environ.get("DATABRICKS_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fb82ac3b1b374d6 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/goose.py:668 
                api_key = os.environ.get("TETRATE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a9566bd3b7bc747 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/goose.py:673 
                host = os.environ.get("TETRATE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28d2f6de89469d80 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/goose.py:678 
                api_key = os.environ.get("GOOGLE_API_KEY") or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef4c3746629f8c13 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/goose.py:678 
                api_key = os.environ.get("GOOGLE_API_KEY") or os.environ.get(
                    "GEMINI_API_KEY"
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c60a8485c8665cc — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/hermes.py:308 
        jsonl_text = session_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00cd3dd53e5ae51b — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/hermes.py:319 
                atif_path.write_text(json.dumps(trajectory.to_json_dict(), indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e451c19cc1031023 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/hermes.py:359 
                key_val = os.environ.get(key_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7aaf74021e37c81d — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/hermes.py:367 
                base_url = os.environ.get("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b501bd2590ec64d2 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/hermes.py:372 
            openrouter_key = os.environ.get("OPENROUTER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d432d2cad23a04ab — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/kimi_cli.py:175 
            val = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3ea72eb13ea41d1 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/kimi_cli.py:183 
        env_override = os.environ.get("KIMI_MODEL_MAX_CONTEXT_SIZE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdd3b7c44f0be9b7 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/kimi_cli.py:259 
            trajectory_path.write_text(
                format_trajectory_json(trajectory.to_json_dict())
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db5deb3ce436634f — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/kimi_cli.py:319 
            val = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a81f67e06d2a6d5 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/kimi_cli.py:372 
        for line in output_path.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #effb9be45c3e5889 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph.py:161 
        local_runner_copy.write_text(runner_script_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc2daaab9bfd5cd3 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph.py:259 
        instruction_path.write_text(instruction)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b23a25ad3f52faf — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph.py:286 
            value = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #509bce58681b628d — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph.py:331 
            raw = local.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65c51483729df9d0 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph_runner.py:233 
    parent = os.environ.get("HARBOR_LANGSMITH_PARENT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bed974a2af3b8581 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph_runner.py:248 
    baggage = os.environ.get("HARBOR_LANGSMITH_BAGGAGE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c29efe9375277079 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph_runner.py:270 
    instruction = Path(args.instruction_file).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41d1531c65026507 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph_runner.py:279 
        "thread_id", os.environ.get("HARBOR_SESSION_ID") or str(uuid.uuid4())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa444cab79f87b14 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph_runner.py:296 
    Path(args.result_path).write_text(json.dumps(jsonable_result, indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c592d88f1b7292e — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph_runner.py:297 
    Path(args.output_path).write_text(_extract_text(result))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #236c1fa125e3fc9c — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/langgraph_runner.py:304 
        Path(args.summary_path).write_text(json.dumps(summary, indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0895074ae56a433c — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/mimo.py:120 
        for line in output_path.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78514d86fb7108bd — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/mimo.py:345 
            trajectory_path.write_text(
                format_trajectory_json(trajectory.to_json_dict())
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36462067f1a4f975 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/mimo.py:392 
            base_url = os.environ.get(f"{provider.upper()}_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5dcb6d8e4ce903e8 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/mimo.py:474 
            if key in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e82d0d3e0502e83 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/mimo.py:475 
                env[key] = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53b2326925fbf31c — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/mini_swe_agent.py:444 
            mini_swe_agent_trajectory_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce17206fc5169159 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/mini_swe_agent.py:452 
        atif_trajectory_path.write_text(
            json.dumps(atif_trajectory.to_json_dict(), indent=2)
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95abc03719b67ddb — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/mini_swe_agent.py:494 
            self._config_yaml = Path(config_file).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #523309df6bfb9e1f — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/mini_swe_agent.py:587 
            mini_trajectory = json.loads(mini_trajectory_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91b4d50150be677d — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/nemo_agent.py:341 
            output_text = output_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f9dbf1137e0e86b — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/nemo_agent.py:355 
            trajectory_data = json.loads(trajectory_path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #319f68e0b5b015b8 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/nemo_agent_run_wrapper.py:26 
_log_level_str = os.environ.get("NVIDIA_NAT_LOG_LEVEL", "WARNING").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6b69342f0243305 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/nemo_agent_run_wrapper.py:28 
os.environ.setdefault("NAT_LOG_LEVEL", _log_level_str)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1116022e83e5ebb3 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/nemo_agent_run_wrapper.py:47 
    with open(output_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edb5176f91520824 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openclaw.py:48 
        lines = path.read_text(encoding="utf-8", errors="replace").splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d7405e4af5e71ba — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openclaw.py:258 
    raw = log_path.read_text(encoding="utf-8", errors="replace")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a763e1ae20402a2 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openclaw.py:542 
        return self._load_json_object(output_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0ce4900643741d8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openclaw.py:829 
                instruction = instruction_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ab05afe019f2112 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openclaw.py:857 
            trajectory_path.write_text(
                format_trajectory_json(trajectory.to_json_dict())
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15a42a5205f884ba — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openclaw.py:913 
        upload_path.write_text(
            json.dumps(
                self._build_full_openclaw_config(),
                indent=2,
            )
            + "\n",
            encoding="utf-8",
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e5041a32db4d137 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openclaw.py:924 
            instruction_path.write_text(instruction)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3759f4caf4eadab5 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/opencode.py:139 
        for line in output_path.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a61313bfa978880 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/opencode.py:399 
            trajectory_path.write_text(
                format_trajectory_json(trajectory.to_json_dict())
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f804cc552e0a92c8 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/opencode.py:446 
            base_url = os.environ.get("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a63b7bb84baae054 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/opencode.py:528 
            if key in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d1d07e9f53492e2 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/opencode.py:529 
                env[key] = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd2f5ec523d8eced — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands.py:190 
                with open(event_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3512347706c3e7de — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands.py:352 
                with open(event_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70b1b8ceae95d204 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands.py:540 
            with open(completion_files[0], "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4334c4e0029a12c2 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands.py:572 
                with open(completion_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91e2c140c33a8e3e — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands.py:776 
            with open(trajectory_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f453c3120e3b96d7 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk.py:140 
        local_copy.write_text(runner_script_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cce83a8590a32179 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk.py:161 
            with open(trajectory_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d7e620c27ecfcc8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:38 
    content = skill_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2879b874d51d658 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:157 
        "session_id": os.environ.get("SESSION_ID", "harbor-session"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b06eb0fdb290940b — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:185 
    model = os.environ.get("LLM_MODEL", "anthropic/claude-sonnet-4-5-20250929")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4488ea89ff46a8f — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:186 
    api_key = os.environ.get("LLM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c84876118d639807 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:187 
    base_url = os.environ.get("LLM_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83c24270d576e607 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:199 
    extra_body_raw = os.environ.get("LITELLM_EXTRA_BODY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #171fd2860c0284d7 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:212 
    temperature_raw = os.environ.get("LLM_TEMPERATURE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bcd748e53ae92ff — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:226 
    if os.environ.get("LOAD_SKILLS", "1") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f12cf3fde6459bf2 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:227 
        skill_paths_str = os.environ.get("SKILL_PATHS", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63e8c8e54f88d23e — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:238 
    mcp_servers_raw = os.environ.get("MCP_SERVERS_JSON")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3878be171ef972c9 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:271 
    max_iter_raw = os.environ.get("MAX_ITERATIONS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb9fbd040721bf81 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:438 
    with open(trajectory_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c5e51da10ceed14 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/pi.py:119 
            val = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d06229bba240c5e8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/pi.py:160 
        for line in output_file.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bd395ccdf46e2bc — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/qwen_code.py:89 
        for line in path.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #478c756d6acaac68 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/qwen_code.py:255 
            trajectory_path.write_text(
                format_trajectory_json(trajectory.to_json_dict())
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecbd9d2fb7b0c788 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/qwen_code.py:311 
        elif "OPENAI_MODEL" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88b914e4a927cf41 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/qwen_code.py:312 
            env["OPENAI_MODEL"] = os.environ["OPENAI_MODEL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #604ba687408e7089 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/rovodev_cli.py:191 
            session_data = json.loads(session_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61cef05929108fe7 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/rovodev_cli.py:607 
            trajectory_path.write_text(
                json.dumps(trajectory.to_json_dict(), indent=2, ensure_ascii=False)
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98d21bc982104861 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/rovodev_cli.py:630 
        rovodev_user_email = os.environ.get("ROVODEV_USER_EMAIL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ed15fa00b6dbee9 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/rovodev_cli.py:631 
        rovodev_user_api_token = os.environ.get("ROVODEV_USER_API_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b95fa43a5232428 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/rovodev_cli.py:632 
        rovodev_user_billing_site = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44762fabd119e308 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/rovodev_cli.py:632 
        rovodev_user_billing_site = os.environ.get(
            "ROVODEV_USER_BILLING_SITE", "https://hello.atlassian.net"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6cb1deae57eb418 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/swe_agent.py:163 
        swe_agent_trajectory = json.loads(swe_agent_trajectory_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45da556d28d30f3e — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/swe_agent.py:170 
        atif_trajectory_path.write_text(
            json.dumps(atif_trajectory.to_json_dict(), indent=2) + "\n"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7c39220ff941770 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/swe_agent.py:348 
            swe_trajectory = json.loads(traj_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05dc7bb6a8668b3e — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/swe_agent.py:385 
            if key in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e062805a8b8f1d88 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/swe_agent.py:386 
                env[key] = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #267aca8a4023f9ae — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/swe_agent.py:395 
                    if api_key_var in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5facea8ed0931c72 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/swe_agent.py:396 
                        env[api_key_var] = os.environ[api_key_var]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77310f0bfa9afcd8 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/trae_agent.py:172 
        api_key = os.environ.get(api_key_env)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1da84895a909c13 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/trae_agent.py:175 
            api_key = os.environ.get("GEMINI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccb76df34f08531c — Environment-variable access.
pkgs/python/[email protected]/src/harbor/agents/installed/trae_agent.py:182 
            base_url = os.environ.get(base_url_env)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c57c3702ce56d24a — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/trae_agent.py:296 
            return json.loads(trajectory_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40da3a40bce5ce57 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/installed/trae_agent.py:482 
            trajectory_path.write_text(
                format_trajectory_json(trajectory.to_json_dict())
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6caac140d1a2d368 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/oracle.py:151 
                exit_code_path.write_text(str(result.return_code))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09a7b96beffa6f9a — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/terminus_2/asciinema_handler.py:48 
            open(self._recording_path) as input_file,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5df0ab45f7c6eac — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/terminus_2/asciinema_handler.py:49 
            open(output_path, "w") as output_file,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02ce9f02b0128a4a — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/terminus_2/terminus_2.py:269 
        self._prompt_template = self._get_prompt_template_path().read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8059f84aab2027a7 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/terminus_2/terminus_2.py:270 
        self._timeout_template = self._get_timeout_template_path().read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69defb638157a9f2 — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/terminus_2/terminus_2.py:1786 
            with open(trajectory_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d190c1a9e04fb17b — Filesystem access.
pkgs/python/[email protected]/src/harbor/agents/terminus_2/terminus_2.py:1950 
            with open(trajectory_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #436454dc7110dce0 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:61 
                (trial_dir / "result.json").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ae25d5165bd8b1a — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:85 
            (trial_dir / "result.json").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca1ba6372c26eb3b — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:131 
        prompt_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0bf3c98a720dd29 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:133 
        else (PROMPTS_DIR / "analyze.txt").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce7b24ea9c9d1017 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:240 
    (paths.tests_dir / "criteria.json").write_text(
        json.dumps([c.name for c in rubric.criteria], indent=2)
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b46ed0eb8468fb87 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:246 
        tomllib.loads(paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ba88d30f2b62478 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:277 
        (PROMPTS_DIR / "analyze-output.txt")
        .read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05ef3370a905b526 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:287 
    paths.instruction_path.write_text(
        f"{rendered.rstrip()}\n\n{output_section.strip()}\n"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99d04799fe8d453f — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:359 
    (job.job_dir / "analysis.json").write_text(report.model_dump_json(indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #623c3f4972e842dc — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:371 
    data = yaml.safe_load(Path(config_path).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4effd14417d08851 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:394 
            paths.test_stdout_path.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cef7835c70407080 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:405 
    parsed = response_model.model_validate(json.loads(result_path.read_text()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #928cc829d6594049 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/analyzer.py:422 
    trial_dir.joinpath("analysis.json").write_text(
        analyze_result.model_dump_json(indent=2), encoding="utf-8"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #816334239d915a98 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/checker.py:75 
        prompt_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b6e76c35acf7929 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/checker.py:77 
        else (PROMPTS_DIR / "check.txt").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab268b5679eeac8a — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/checker.py:172 
    (paths.tests_dir / "criteria.json").write_text(
        json.dumps([c.name for c in rubric.criteria], indent=2)
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c601b461d45f9944 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/checker.py:178 
        tomllib.loads(paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbd4d4618db3d633 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/checker.py:194 
        (PROMPTS_DIR / "check-output.txt")
        .read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60f94d8680d8a584 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/checker.py:204 
    paths.instruction_path.write_text(
        f"{rendered.rstrip()}\n\n{output_section.strip()}\n"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4239673d8c7482d9 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/checker.py:271 
    (job.job_dir / "check_report.json").write_text(report.model_dump_json(indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b93322b96ca107cb — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/checker.py:283 
    data = yaml.safe_load(Path(config_path).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a08b2ce7171189d — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/checker.py:306 
            paths.test_stdout_path.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8118b4a3fa5d8b95 — Filesystem access.
pkgs/python/[email protected]/src/harbor/analyze/checker.py:317 
    parsed = response_model.model_validate(json.loads(result_path.read_text()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd20f6bc2439bac6 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/auth/constants.py:10 
SUPABASE_URL = os.environ.get("HARBOR_SUPABASE_URL", DEFAULT_SUPABASE_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #503e6cbdc80b6667 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/auth/constants.py:11 
SUPABASE_PUBLISHABLE_KEY = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b4c76fae5a69e1b — Environment-variable access.
pkgs/python/[email protected]/src/harbor/auth/constants.py:11 
SUPABASE_PUBLISHABLE_KEY = os.environ.get(
    "HARBOR_SUPABASE_PUBLISHABLE_KEY", DEFAULT_SUPABASE_PUBLISHABLE_KEY
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31dd98ca88af6c90 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/auth/credentials.py:59 
    value = os.environ.get(API_KEY_ENV_VAR)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c8a2d609c72e975 — Filesystem access.
pkgs/python/[email protected]/src/harbor/auth/credentials.py:94 
        data = json.loads(path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0942767d65161140 — Filesystem access.
pkgs/python/[email protected]/src/harbor/auth/oauth.py:105 
        data = json.loads(pending_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed395b3aa164a119 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_review.py:949 
            content = path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #088b4584171dbf68 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_review.py:1071 
    output.write_text("\n".join(parts))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f28bea59273bbaba — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:99 
                    config_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71fa8f8919f9070c — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:242 
                self._WIZARD_CONFIG.write_text(
                    self._wizard_config.model_dump_json(indent=4)
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #360770a8800b5818 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:442 
                raw = src_file.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7912d851bea838b — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:444 
                (target_dir / filename).write_text(rendered)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d2a9573f5f1f241 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:454 
                rendered = src_file.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #571bd322fa2bd7d6 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:457 
                (src_pkg_dir / filename).write_text(rendered)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20526a257de09c88 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:466 
                task_toml.write_text(
                    Template(task_toml.read_text()).render(**jinja_context)
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a3632a4d3a5a318 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:467 
                    Template(task_toml.read_text()).render(**jinja_context)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3c32a5855476a69 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:473 
            rendered_yaml = Template(yaml_tmpl.read_text()).render(**jinja_context)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e4852e8ff3c0130 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:474 
            (target_dir / f"run_{adapter_id}.yaml").write_text(rendered_yaml)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41afc1595e104c2c — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:479 
            text = pyproject.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d2fc169d4b26d76 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:497 
            pyproject.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2548195ed5659e34 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/adapter_wizard.py:501 
            init_py.write_text("__all__ = []\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9508e33d95158570 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/add.py:84 
    config = TaskConfig.model_validate_toml(paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ab6c508dc37ef10 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/add.py:347 
    manifest_path.write_text(manifest.to_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #add421ca8f21f2b2 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/admin/admin.py:224 
            with open(task_toml_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4374fcbcc4638ec — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/admin/admin.py:258 
                with open(task_toml_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76cdfb4c7230b40c — Environment-variable access.
pkgs/python/[email protected]/src/harbor/cli/admin/admin.py:323 
            **os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab15a2710f7b85a0 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/annotator/annotator.py:19 
ANNOTATE_PROMPT = (ANNOTATOR_DIR / "annotate-task.md").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5dd480deb2377764 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/annotator/annotator.py:144 
        tomllib.loads(paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e5abad215badadf — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/annotator/annotator.py:156 
    paths.instruction_path.write_text(f"{rendered.rstrip()}\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d7f7e0f466f24ea — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/annotator/annotator.py:229 
    data = yaml.safe_load(Path(config_path).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #313cf81d945d5963 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/annotator/annotator.py:248 
            paths.test_stdout_path.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea9c9f3371291fab — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/annotator/annotator.py:259 
    return AnnotateOutput.model_validate(json.loads(result_path.read_text()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9ada6f098d0c774 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/annotator/annotator.py:264 
    paths.readme_path.write_text(output.readme)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3052fca7671a70b3 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/annotator/annotator.py:266 
    config = TaskDefinitionConfig.model_validate_toml(paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2da7fdc41187ff64 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/annotator/annotator.py:269 
        paths.config_path.write_text(config.model_dump_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce0545281f56bf94 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/config_init.py:113 
    output.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fa9f837cda5a14c — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/exec.py:562 
    text = path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c9cc65fab4939d6 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/hub_leaderboards.py:203 
    output.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5aefcf30c439939e — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:109 
        template_data = tomllib.loads(metadata_template.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea85b37a11f24757 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:139 
    (task_dir / "task.toml").write_text(task_config.model_dump_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96f4eb54b14dd178 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:140 
    (task_dir / "README.md").write_text(f"# {name}\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad2ae401591b66fe — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:173 
                p.write_text(prefix + p.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef4ed89e9cb08135 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:178 
            lines = p.read_text().split("\n", 1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef58e9dda1a902f6 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:179 
            p.write_text(
                lines[0] + "\n" + canary_string + (lines[1] if len(lines) > 1 else "")
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #347cc6668503f814 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:262 
    dataset_path.write_text(manifest.to_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17f5d500113a9478 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:307 
        dataset_path.write_text(manifest.to_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #062821da6e97bb2b — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:313 
            readme_path.write_text(f"# {name}\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f50374b47d8a842 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:323 
            dataset_path.write_text(manifest.to_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f7c6e90bdf51a9d — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/init.py:348 
                dataset_path.write_text(manifest.to_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f87e315e2c56273c — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/jobs.py:102 
                TaskPaths(local_path).config_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eea2564062edd310 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/cli/jobs.py:149 
            if default is None and var_name not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b27eb92fa7f77c88 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/jobs.py:1138 
            config_data = yaml.safe_load(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e39db1b6fe452222 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/jobs.py:1140 
            config_data = json.loads(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa3abd50d009f27a — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/jobs.py:1717 
                result_text = trial_paths.result_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d0993e87a10b3e9 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/jobs.py:1753 
    config = JobConfig.model_validate_json(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1f7e5197341ec09 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/notifications.py:15 
        data = json.loads(NOTIFICATIONS_PATH.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d375227b85170274 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/notifications.py:26 
            data = json.loads(NOTIFICATIONS_PATH.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60a234c144e4392c — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/notifications.py:31 
        NOTIFICATIONS_PATH.write_text(json.dumps(data))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f9f67a16459a52a — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/quality_checker/models.py:55 
    text = rubric_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a68cec6e2dcb0c2 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/remove.py:53 
                    config = TaskConfig.model_validate_toml(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec1064bd18b15a9b — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/remove.py:72 
    config = TaskConfig.model_validate_toml(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb393f06d834b00e — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/remove.py:211 
    manifest_path.write_text(manifest.to_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #641ebb998ca64d30 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/sweeps.py:95 
        base_config = JobConfig.model_validate(yaml.safe_load(config_path.read_text()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01ef22ea6e0f140c — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/sweeps.py:97 
        base_config = JobConfig.model_validate_json(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e0f9d9f5f480a76 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/sweeps.py:116 
            hints_map = json.loads(hints_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d12d963d147476f — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/sweeps.py:170 
                            data = rp.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4bd55398f1e4985 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/sweeps.py:203 
                        data = result_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97e8c25a228f39f8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/sync.py:49 
            config = TaskConfig.model_validate_toml(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3295988ac5df5f5e — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/sync.py:123 
    manifest_path.write_text(manifest.to_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e537fc5dbc0f564 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/sync.py:190 
                config = TaskConfig.model_validate_toml(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16ffe8ca5c376121 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/sync.py:249 
            manifest_path.write_text(manifest.to_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2513da9294ce01c6 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/tasks.py:529 
    config = TaskConfig.model_validate_toml(paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39d9db32f82e5abe — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/tasks.py:542 
    paths.config_path.write_text(config.model_dump_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c81963615488ee00 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/template-metric/metric.py:14 
    for line in input_path.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ea609d7efc8b6c9 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/template-metric/metric.py:27 
    output_path.write_text(json.dumps({"mean": mean}))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6658f0ba2c821066 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/trials.py:522 
                yaml.safe_load(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #895f83b477491ca3 — Filesystem access.
pkgs/python/[email protected]/src/harbor/cli/trials.py:525 
            base_config = TrialConfig.model_validate_json(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e1f34c7fa3e3f75 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/cli/view.py:358 
    frontend_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bf93cf5cadd5cc9 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/cli/view.py:375 
    os.environ["HARBOR_VIEWER_FOLDER"] = str(folder)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2d0fa53a26f6016 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/cli/view.py:376 
    os.environ["HARBOR_VIEWER_MODE"] = mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ef2bd90c85d9c90 — Filesystem access.
pkgs/python/[email protected]/src/harbor/compile/compiler.py:109 
            paths.instruction_path.write_text(
                self._with_trailing_newline(instruction.text)
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45d5748fe56c0798 — Filesystem access.
pkgs/python/[email protected]/src/harbor/compile/compiler.py:185 
        (paths.tests_dir / REQUIRED_ARTIFACTS_FILENAME).write_text(
            "".join(f"{artifact}\n" for artifact in required_artifacts)
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb74c2a25246082e — Filesystem access.
pkgs/python/[email protected]/src/harbor/compile/compiler.py:224 
        (paths.tests_dir / ARTIFACT_SCHEMA_CHECKS_FILENAME).write_text(
            json.dumps(checks, indent=2) + "\n"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34c174a17bc9c7b8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/compile/compiler.py:232 
            task_config = TaskConfig.model_validate_toml(paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4f5997c65a8b85a — Filesystem access.
pkgs/python/[email protected]/src/harbor/compile/compiler.py:261 
        paths.config_path.write_text(task_config.model_dump_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55fabae84e8bcb28 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/constants.py:13 
HARBOR_REGISTRY_WEBSITE_URL = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b5437a44f10bf7c — Environment-variable access.
pkgs/python/[email protected]/src/harbor/constants.py:13 
HARBOR_REGISTRY_WEBSITE_URL = os.environ.get(
    "HARBOR_REGISTRY_WEBSITE_URL", DEFAULT_HARBOR_REGISTRY_WEBSITE_URL
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6987bb75f5a2914 — Filesystem access.
pkgs/python/[email protected]/src/harbor/download/downloader.py:315 
        (target / "result.json").write_text(job_result.model_dump_json(indent=4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #198865691a9dd802 — Filesystem access.
pkgs/python/[email protected]/src/harbor/download/downloader.py:397 
    path.write_text(json.dumps(payload, indent=4, default=str))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b84d2e793ce85a54 — Filesystem access.
pkgs/python/[email protected]/src/harbor/download/downloader.py:405 
        return TrialResult.model_validate_json(result_path.read_text()), ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb08da74b9ce9398 — Filesystem access.
pkgs/python/[email protected]/src/harbor/download/downloader.py:484 
    path.write_text("\n".join(lines))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29b04af3bb9c81c9 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/ack.py:684 
        if os.getenv("LOCAL_TEST", "false") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d4877ddb8f6f473 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/ack.py:710 
                crane_env = {**os.environ}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1061b1d01bf542f5 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/ack.py:728 
                    Path(config_path).write_text(json.dumps(docker_config))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbd3540fbe291b03 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/ack.py:968 
                Path(config_path).write_text(json.dumps(docker_config))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #540276324e019468 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/ack.py:977 
                env={**os.environ, **env} if env else None,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe668f86525ca464 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/ack.py:1037 
        dockerfile_content = dockerfile_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5da649fe1edbfb5 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/base.py:1078 
                host_list_path.write_text("\n".join(selected) + "\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3b699f8096dbb3f — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/beam.py:210 
        compose_data = yaml.safe_load(compose_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42db9323d0de11c4 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/beam.py:248 
    path.write_text(yaml.safe_dump(override, sort_keys=False))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad50785fffd58420 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/beam.py:593 
        if os.environ.get("BEAM_TOKEN") or _has_valid_beam_config():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a0d9261c0d3b012 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/beam.py:1197 
                        target_file.write(tmp_file_path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5362798d5305dd5b — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/blaxel.py:297 
        path.write_text(_NO_SLIM_BLAXEL_TOML)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87ced880f0a9ef52 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/blaxel.py:638 
        await sandbox.fs.write_binary(target_path, Path(source_path).read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1aa670c356aa883 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/blaxel.py:974 
        content = "\n".join(path.read_text() for path in compose_paths if path.exists())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95a01aa6fcaf2b00 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/blaxel.py:983 
            value = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fedfdf565712acc3 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:153 
        self._namespace = namespace or os.environ.get(_NAMESPACE_ENV) or self._warmpool

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc4cefcb8c69f57e — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:155 
            token_url or os.environ.get(_TOKEN_URL_ENV) or _DEFAULT_TOKEN_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcc80d175371a680 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:158 
            base_url or os.environ.get(_BASE_URL_ENV) or _DEFAULT_BASE_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c855ff751114e1e — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:175 
        self._startup_command = startup_command or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ce79c79a5cc8ea8 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:175 
        self._startup_command = startup_command or os.environ.get(
            "CUA_CLOUD_STARTUP_COMMAND"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1a740465ba0b7b2 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:209 
        if not os.environ.get(_CLIENT_ID_ENV):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0dc75a4d1d41347 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:214 
        if not os.environ.get(_CLIENT_SECRET_ENV):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3419e128fd3c58b — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:448 
        data = Path(source_path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee7bf29d585ef968 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:471 
            data = local_path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a594e8ea99b29ab7 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:522 
                client_id=os.environ[_CLIENT_ID_ENV],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d52611f0cbd03da2 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/cua_cloud.py:523 
                client_secret=os.environ[_CLIENT_SECRET_ENV],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d0bf0838e418264 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/cwsandbox.py:209 
        if not os.environ.get("CWSANDBOX_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cbabdc749e2d865 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/cwsandbox.py:732 
            Path(source_path).read_bytes(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4bda1b4ba7d28c3 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/daytona/environment.py:141 
    has_api_key = bool(os.environ.get("DAYTONA_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02c46ff0807ef650 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/daytona/environment.py:143 
        os.environ.get("DAYTONA_JWT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81fd8d46f2022128 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/daytona/environment.py:144 
        and os.environ.get("DAYTONA_ORGANIZATION_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0d365eabf79e7a3 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/daytona/snapshots.py:86 
        target = os.environ.get("DAYTONA_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42e21b18b9aac424 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/daytona/snapshots.py:299 
        target = os.environ.get("DAYTONA_TARGET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fca0e3269397a700 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/definition.py:109 
        data = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #926d0a27d0ff2352 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/docker/__init__.py:23 
    path.write_text(json.dumps(compose, indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afbce696e450c2c4 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/docker/__init__.py:55 
    path.write_text(json.dumps(compose, indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ad8e7406a319258 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/docker/compose_env.py:24 
        env_dict = os.environ.copy() if include_os_env else {}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fb67b8d3fc2f396 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/docker/docker.py:385 
            document = yaml.safe_load(compose_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44d8fa9ba9021eb7 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/docker/docker.py:438 
        path.write_text(json.dumps({"services": services}, indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d4e73e5637bf1f1 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/docker/docker.py:563 
            base_env=os.environ if include_os_env else None,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #172028a2938f3c74 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/docker/utils.py:138 
        output = build_log_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ba5cdfe9e17a582 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/e2b.py:74 
        if not os.environ.get("E2B_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be48c27f99571244 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/e2b.py:315 
        await self._sandbox.files.write(target_path, Path(source_path).read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9490d8a845e55bd4 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/e2b.py:343 
                        data=file_path.read_bytes(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9577eb374ef2b8dd — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/gke.py:262 
            os.environ.get("KUBECONFIG", Path.home() / ".kube" / "config")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74ad1fea6e2e9398 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/gke.py:399 
        project = os.environ.get("GCP_PROJECT") or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e36015adbe7d6df — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/gke.py:399 
        project = os.environ.get("GCP_PROJECT") or os.environ.get(
            "GOOGLE_CLOUD_PROJECT"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #996dbe89fe2dc572 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/islo.py:199 
        self._api_key: str = os.environ.get("ISLO_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78adf713bbe900e4 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/islo.py:200 
        self._api_url: str = os.environ.get("ISLO_API_URL", "https://api.islo.dev")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27a2a029d9ae8bee — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/islo.py:201 
        self._compute_url: str | None = os.environ.get("ISLO_COMPUTE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51c987c5366cd1c3 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/langsmith.py:141 
        api_url = langsmith_endpoint or os.environ.get(_LANGSMITH_ENDPOINT_ENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4be0140695088a7 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/langsmith.py:151 
        configured_sandbox_api_url = sandbox_api_url or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98f1c0ce15ff24a4 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/langsmith.py:151 
        configured_sandbox_api_url = sandbox_api_url or os.environ.get(
            _LANGSMITH_SANDBOX_API_URL_ENV
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #caec49ea7cf59d1d — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/modal.py:423 
            doc = yaml.safe_load(path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e100cc4e12ba8f8d — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/modal.py:484 
        content = "\n".join(path.read_text() for path in compose_paths if path.exists())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4b5df4b24abda9a — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/modal.py:494 
            value = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14477efa1bc2068c — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/modal.py:831 
        has_env_token = os.environ.get("MODAL_TOKEN_ID") and os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #133881ffa97f3e05 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/modal.py:831 
        has_env_token = os.environ.get("MODAL_TOKEN_ID") and os.environ.get(
            "MODAL_TOKEN_SECRET"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #daebb765ecc18bfb — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/novita.py:752 
                self._dockerfile_content = self._environment_definition_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e654b442c70979bd — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/novita.py:757 
        self._api_key = os.environ.get("NOVITA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a643a220b0396461 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/novita.py:771 
        self._novita_domain = os.environ.get("NOVITA_DOMAIN") or self._NOVITA_DOMAIN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #beb5bdb63ef9f70d — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/novita.py:773 
            os.environ.get("NOVITA_API_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7653f99aed0e3f3a — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/novita.py:774 
            or os.environ.get("NOVITA_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e13138d25cb8d52b — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/novita.py:888 
        if not os.environ.get("NOVITA_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62dfc47246a35c20 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/novita.py:1031 
                    copy_files[raw_src] = ("file", src_path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a8f74fe3e55d909 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/novita.py:1391 
        await self._sandbox.files.write(target_path, Path(source_path).read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e9ba64947fcb9ca — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/novita.py:1408 
                        data=file_path.read_bytes(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e56c65302de560cb — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/opensandbox.py:105 
            domain if domain is not None else os.environ.get("OPENSANDBOX_DOMAIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1aaf7ecceb4a8b84 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/opensandbox.py:108 
            api_key if api_key is not None else os.environ.get("OPENSANDBOX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f94ae2903068b29 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/opensandbox.py:167 
        if not os.environ.get("OPENSANDBOX_DOMAIN"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0b3f651e8805e80 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/opensandbox.py:585 
                    data=source_path.read_bytes(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7fe1c073a6348d2 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/opensandbox.py:611 
                    data=file_path.read_bytes(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e7b5670cd59f569 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/opensandbox.py:629 
        target_path.write_bytes(await self._sandbox.files.read_bytes(source_path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5db6545e9c63a24f — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/opensandbox.py:666 
                    data = await self._sandbox.files.read_bytes(entry.path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #843f2dfef217fc8d — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/openshift.py:445 
            self._log_file_handle = open(log_path, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #752dc96d51376908 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/runloop.py:65 
        if not os.environ.get("RUNLOOP_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e1fcdb5c4e46db8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/runloop.py:461 
                    (tmp_path / "Dockerfile").write_text(prebuilt_dockerfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55aab19a03f7215b — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/runloop.py:479 
                dockerfile_content = self._environment_definition_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dce5c016fb737d9 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:80 
                **os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7d7f9cf9b4e13f4 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:81 
                "PATH": "/usr/bin:/usr/local/bin:" + os.environ.get("PATH", "/bin"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26e66881bc9bcbe4 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:124 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbee0dee472a13c6 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:129 
    cwd = req.cwd if req.cwd else os.environ.get("SINGULARITY_WORKDIR", "/app")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #296f1883624a7d99 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:214 
            with open(test_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87478dba5a1de088 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:241 
                        with open(src, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9485a6f50df91a83 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:254 
                with open(dest, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #101ee24b0a135fb9 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:260 
        with open(f"{dpkg_cfg_dir}/singularity-compat", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c59a4c0e338e712 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:309 
    with open(sudo_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0020f2e2659b075d — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:332 
        with open(sources_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f4c6777e566e6da — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:352 
            with open("/etc/os-release", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9814b907cd8134b — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:370 
        with open(sources_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60b49a86cb318fa1 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/singularity/server.py:388 
    os.environ["SINGULARITY_WORKDIR"] = workdir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46473dc8402f5628 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/singularity.py:177 
                for line in self._dockerfile_path.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b60b9e668743bb7e — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/singularity.py:223 
        lock_file = open(lock_path, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c94326130a8f251d — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/singularity.py:516 
                            for child in children_file.read_text().split():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #093fa20d58c621f2 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/singularity.py:529 
                for line in Path(f"/proc/{p}/smaps_rollup").read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dce708bfc6519ecf — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/singularity/singularity.py:537 
                rss_pages = int(Path(f"/proc/{p}/statm").read_text().split()[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3bf2079263fa71b — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/tensorlake.py:147 
        return tomllib.loads(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c545cb78167b70e3 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/tensorlake.py:173 
        if value and not os.environ.get(env_key):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #930a8fb10098aab5 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/tensorlake.py:174 
            os.environ[env_key] = str(value)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d44efa664ca4b311 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/tensorlake.py:197 
        if not os.environ.get("TENSORLAKE_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbc045c242ebc5c7 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/tensorlake.py:460 
        raw = path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c99fde67fba8d52 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/tensorlake.py:602 
                    h.update(entry.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ab8d6706d005e55 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/tensorlake.py:2379 
        data = Path(source_path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9a9eb6f84d7bf83 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/use_computer.py:154 
        self._api_key = api_key or os.environ.get("USE_COMPUTER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e81c408de6a7e2cf — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/use_computer.py:156 
        self._host = host or os.environ.get("USE_COMPUTER_HOST", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8ae52d5ed164593 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/use_computer.py:160 
        env_version = os.environ.get("USE_COMPUTER_VERSION", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a0a6dc98760db01 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/use_computer.py:162 
        self._snapshot = snapshot or os.environ.get("USE_COMPUTER_SNAPSHOT", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ebc0e6eb81283ce — Environment-variable access.
pkgs/python/[email protected]/src/harbor/environments/use_computer.py:206 
        if not os.environ.get("USE_COMPUTER_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e814986489ea2a6 — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/use_computer.py:668 
        files = {"file_data": (source.name, source.read_bytes())}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58189899ac40e52f — Filesystem access.
pkgs/python/[email protected]/src/harbor/environments/use_computer.py:797 
        data = tomllib.loads(toml_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #774c90f7364fc406 — Filesystem access.
pkgs/python/[email protected]/src/harbor/job.py:80 
            JobResult.model_validate_json(self._job_result_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1f6f9738544b6da — Filesystem access.
pkgs/python/[email protected]/src/harbor/job.py:212 
            self._job_config_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb3ae52483105b0d — Filesystem access.
pkgs/python/[email protected]/src/harbor/job.py:232 
                result_text = trial_paths.result_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27b2eeb49a99a370 — Filesystem access.
pkgs/python/[email protected]/src/harbor/job.py:259 
                TrialConfig.model_validate_json(trial_paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a4eefd35fc3d98c — Filesystem access.
pkgs/python/[email protected]/src/harbor/job.py:479 
        self._job_result_path.write_text(result_json)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbac201ec4127f27 — Filesystem access.
pkgs/python/[email protected]/src/harbor/job.py:667 
        self._job_lock_path.write_text(
            self._job_lock.model_dump_json(indent=4, exclude_none=True)
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9888af5882e9e4ad — Filesystem access.
pkgs/python/[email protected]/src/harbor/job.py:673 
            return JobLock.model_validate_json(self._job_lock_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd4f5ba38b27689f — Filesystem access.
pkgs/python/[email protected]/src/harbor/job.py:749 
            self._job_config_path.write_text(
                self.config.model_dump_json(indent=4, exclude_defaults=True)
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e16d9441d6419bd3 — Filesystem access.
pkgs/python/[email protected]/src/harbor/leaderboard/dynamic_validation.py:87 
    digest = hashlib.sha256(path.read_bytes()).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7980ea05178a49ce — Filesystem access.
pkgs/python/[email protected]/src/harbor/leaderboard/metadata.py:29 
    raw = yaml.safe_load(path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f792a7c8692784db — Filesystem access.
pkgs/python/[email protected]/src/harbor/leaderboard/report_display.py:266 
    resolved.write_text(
        json.dumps(_as_report_dict(report), indent=2) + "\n",
        encoding="utf-8",
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #661b99d53ac285cf — Filesystem access.
pkgs/python/[email protected]/src/harbor/llms/lite_llm.py:248 
                logging_path.write_text(
                    json.dumps(
                        clean_dict,
                        indent=4,
                    )
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc273555629749fd — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:206 
        content = dockerfile_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c85ebba66b2097cf — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:246 
        dockerfile_path.write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98fbd006b13701f5 — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:288 
        target_path.write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80a5172bb013ff8e — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:322 
    content = dockerfile_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dc0124474fdac3c — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:339 
    content = dockerfile_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28fffb0f02cb422e — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:358 
    content = source.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8699e2887630c62 — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:361 
    target.write_text(content + REWARD_LOGGING_SUFFIX)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06015fa17ee2b304 — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:384 
        compose_data = yaml.safe_load(compose_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4744b4a1a6bcdec6 — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:459 
            yaml.safe_load((source_dir / "task.yaml").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc79e84d36e0059c — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:484 
            content = task_paths.test_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #019664c50adb0ec8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:485 
            task_paths.test_path.write_text(content.replace("$TEST_DIR", "/tests"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e095d6ba2c09940 — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:493 
        task_paths.instruction_path.write_text(instruction)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9cb5042831a442e4 — Filesystem access.
pkgs/python/[email protected]/src/harbor/mappers/terminal_bench.py:498 
        task_paths.config_path.write_text(harbor_config.model_dump_toml())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b0ef0e3b2a1bb9d — Filesystem access.
pkgs/python/[email protected]/src/harbor/metrics/uv_script.py:23 
            with open(input_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #833d444625916889 — Filesystem access.
pkgs/python/[email protected]/src/harbor/metrics/uv_script.py:48 
            return json.loads(output_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04ceca4756309fe2 — Filesystem access.
pkgs/python/[email protected]/src/harbor/models/dataset/manifest.py:211 
        return cls.from_toml(Path(path).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6ffaad3bfe1969e — Filesystem access.
pkgs/python/[email protected]/src/harbor/models/job/lock.py:462 
    direct_url = dist.read_text("direct_url.json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #200ede06f346a871 — Filesystem access.
pkgs/python/[email protected]/src/harbor/models/registry.py:106 
                DatasetSpec.model_validate(row) for row in json.loads(path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c238e17421fc511c — Filesystem access.
pkgs/python/[email protected]/src/harbor/models/task/paths.py:194 
            config = tomllib.loads(self.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e57d5c68b0358a8e — Filesystem access.
pkgs/python/[email protected]/src/harbor/models/task/task.py:68 
        self.config = TaskConfig.model_validate_toml(self.paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddf07324777ea895 — Filesystem access.
pkgs/python/[email protected]/src/harbor/models/task/task.py:80 
                strip_canary(self.paths.instruction_path.read_text()),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b7ef43fa52df60d — Filesystem access.
pkgs/python/[email protected]/src/harbor/models/task/task.py:106 
            config = TaskConfig.model_validate_toml(paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e03d6d5fe863ffb4 — Filesystem access.
pkgs/python/[email protected]/src/harbor/models/task/task.py:181 
            extra_instructions.append(resolved_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9c19764ab9478fe — Filesystem access.
pkgs/python/[email protected]/src/harbor/models/task/task.py:194 
            strip_canary(path.read_text()),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2f333c945c4ba3e — Filesystem access.
pkgs/python/[email protected]/src/harbor/publisher/packager.py:56 
                "gitignore", paths.gitignore_path.read_text().splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b43400cea82e39e — Filesystem access.
pkgs/python/[email protected]/src/harbor/publisher/publisher.py:61 
                "instruction": instruction_path.read_text(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2670cf77ad65ddb1 — Filesystem access.
pkgs/python/[email protected]/src/harbor/publisher/publisher.py:182 
        config = TaskConfig.model_validate_toml(paths.config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db10b1d2ba0795b5 — Filesystem access.
pkgs/python/[email protected]/src/harbor/publisher/publisher.py:251 
            instruction = paths.instruction_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af13aadba0e064a6 — Filesystem access.
pkgs/python/[email protected]/src/harbor/publisher/publisher.py:259 
            readme = paths.readme_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd57e16ac2d1d7ec — Filesystem access.
pkgs/python/[email protected]/src/harbor/publisher/publisher.py:266 
            file_data = f.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a83522cdba6c4d15 — Filesystem access.
pkgs/python/[email protected]/src/harbor/publisher/publisher.py:404 
        readme = paths.readme_path.read_text() if paths.readme_path.exists() else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bf944cfdf1f0618 — Filesystem access.
pkgs/python/[email protected]/src/harbor/registry/client/git_repo.py:280 
            for row in json.loads(registry_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7cda7c9f09274e27 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/registry/client/harbor/config.py:7 
HARBOR_SUPABASE_URL = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18209abb5f081852 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/registry/client/harbor/config.py:7 
HARBOR_SUPABASE_URL = os.environ.get(
    "HARBOR_SUPABASE_URL", "https://hlqxxzsirfrgeqasvaps.supabase.co"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9737c48d98c6d89c — Environment-variable access.
pkgs/python/[email protected]/src/harbor/registry/client/harbor/config.py:10 
HARBOR_SUPABASE_PUBLISHABLE_KEY = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b82ced0e53c21254 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/registry/client/harbor/config.py:10 
HARBOR_SUPABASE_PUBLISHABLE_KEY = os.environ.get(
    "HARBOR_SUPABASE_PUBLISHABLE_KEY", "sb_publishable_RGMKhIM1NKzZ8bL3qCVNuA_5TsD6rbF"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49ee9ceed10e5540 — Filesystem access.
pkgs/python/[email protected]/src/harbor/skills.py:204 
        content_digest = hashlib.sha256(file_path.read_bytes()).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5aeed71b41752165 — Filesystem access.
pkgs/python/[email protected]/src/harbor/storage/resumable.py:59 
        upload_url = upload_url_path.read_text().strip() or None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b20bcdd7b60cec0a — Filesystem access.
pkgs/python/[email protected]/src/harbor/storage/resumable.py:102 
            upload_url_path.write_text(upload_url)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #271348a2776f325b — Filesystem access.
pkgs/python/[email protected]/src/harbor/storage/supabase.py:47 
        data = file_path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f18753c5c2fedca5 — Filesystem access.
pkgs/python/[email protected]/src/harbor/tasks/client.py:101 
            content = gitattributes.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0166e75de6f3c257 — Filesystem access.
pkgs/python/[email protected]/src/harbor/trial/artifact_handler.py:435 
                    for entry in json.loads(manifest_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6611cf227967cb94 — Filesystem access.
pkgs/python/[email protected]/src/harbor/trial/artifact_handler.py:447 
            manifest_path.write_text(json.dumps(manifest.to_json_data(), indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a944bf8d02e09fe — Filesystem access.
pkgs/python/[email protected]/src/harbor/trial/trial.py:389 
        self.paths.result_path.write_text(self.result.model_dump_json(indent=4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8fd07463125aa52 — Filesystem access.
pkgs/python/[email protected]/src/harbor/trial/trial.py:401 
        self.paths.exception_message_path.write_text(traceback.format_exc())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf472a2f5340b318 — Filesystem access.
pkgs/python/[email protected]/src/harbor/trial/trial.py:689 
        self.paths.config_path.write_text(
            self.config.model_dump_json(indent=4, exclude_defaults=True)
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0cee1a7719831d81 — Filesystem access.
pkgs/python/[email protected]/src/harbor/trial/trial.py:710 
        self.paths.lock_path.write_text(
            lock.model_dump_json(indent=4, exclude_none=True)
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3411749698d0ca4b — Filesystem access.
pkgs/python/[email protected]/src/harbor/upload/storage.py:31 
        data = file_path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb0d0fb139f7984c — Filesystem access.
pkgs/python/[email protected]/src/harbor/upload/uploader.py:661 
    job_result = JobResult.model_validate_json((job_dir / "result.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #270b23cf7cb19ded — Filesystem access.
pkgs/python/[email protected]/src/harbor/upload/uploader.py:662 
    job_config = JobConfig.model_validate_json((job_dir / "config.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad7440110ebdbf1f — Filesystem access.
pkgs/python/[email protected]/src/harbor/upload/uploader.py:669 
                TrialResult.model_validate_json((child / "result.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8534334c9356e74a — Filesystem access.
pkgs/python/[email protected]/src/harbor/upload/uploader.py:720 
    return TrialLock.model_validate_json(lock_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7723f1a2574b8db — Filesystem access.
pkgs/python/[email protected]/src/harbor/utils/container_cache.py:34 
        hasher.update(dockerfile_path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcfe07b65c0822cc — Filesystem access.
pkgs/python/[email protected]/src/harbor/utils/container_cache.py:44 
            hasher.update(path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a53641f43c8c7b7 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/utils/env.py:71 
        elif os.environ.get(key) == value:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2766dd7fd596073b — Environment-variable access.
pkgs/python/[email protected]/src/harbor/utils/env.py:89 
    if os.environ.get(key) == raw_value:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #704237bad3405978 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/utils/env.py:118 
            if var_name in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d81dd98352e2ae3e — Environment-variable access.
pkgs/python/[email protected]/src/harbor/utils/env.py:119 
                resolved[key] = os.environ[var_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e496f471b3300bf8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/utils/templating.py:34 
    template_content = template_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d93c1fd57d44ae4 — Filesystem access.
pkgs/python/[email protected]/src/harbor/utils/traces_utils.py:68 
        data = json.loads(path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2dfeba7cd0572ab7 — Filesystem access.
pkgs/python/[email protected]/src/harbor/utils/traces_utils.py:380 
            parts.append(path.read_text(errors="replace"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a832af6a606f211 — Filesystem access.
pkgs/python/[email protected]/src/harbor/utils/traces_utils.py:496 
        trajectory_data = json.loads(trajectory_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d708331f40aed0a — Filesystem access.
pkgs/python/[email protected]/src/harbor/utils/traces_utils.py:723 
        trajectory_data = json.loads(trajectory_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a116ae976c24d792 — Filesystem access.
pkgs/python/[email protected]/src/harbor/utils/traces_utils.py:813 
            trajectory_data = json.loads(current_traj_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2283f2e6ff6f5bda — Filesystem access.
pkgs/python/[email protected]/src/harbor/utils/traces_utils.py:904 
        trajectory_data = json.loads(traj_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2c07dbdd01c8794 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/utils/traces_utils.py:1135 
    token = token or os.getenv("HUGGINGFACE_TOKEN") or os.getenv("HF_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0011e1b39720229f — Filesystem access.
pkgs/python/[email protected]/src/harbor/utils/trajectory_validator.py:128 
                with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba935eaee3658d27 — Filesystem access.
pkgs/python/[email protected]/src/harbor/verifier/verifier.py:73 
            return {"reward": float(self.trial_paths.reward_text_path.read_text())}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0f5437242219c0a — Filesystem access.
pkgs/python/[email protected]/src/harbor/verifier/verifier.py:88 
            return json.loads(self.trial_paths.reward_json_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f404eab6f2b0f54e — Environment-variable access.
pkgs/python/[email protected]/src/harbor/viewer/__init__.py:15 
    folder = os.environ.get("HARBOR_VIEWER_FOLDER") or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79bb60ef6db30c44 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/viewer/__init__.py:15 
    folder = os.environ.get("HARBOR_VIEWER_FOLDER") or os.environ.get(
        "HARBOR_VIEWER_JOBS_DIR"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b377f2235f6f5d1 — Environment-variable access.
pkgs/python/[email protected]/src/harbor/viewer/__init__.py:20 
    mode = os.environ.get("HARBOR_VIEWER_MODE", "jobs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eea6bbb218fab0d2 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/scanner.py:61 
                _normalize_viewer_job_config(json.loads(config_path.read_text()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3383c8b247b5fac0 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/scanner.py:73 
            return JobResult.model_validate_json(result_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ebc54c848b0cfa9 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/scanner.py:98 
            return TrialConfig.model_validate_json(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13aac2ec3d2e3149 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/scanner.py:111 
            return TrialResult.model_validate_json(result_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cab262a195e45e98 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:663 
            content = full_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #367b63cf0ae8bb9c — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:1110 
                raw_config = json.loads(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30eda0827098be48 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:1188 
        config_path.write_text(json.dumps(data))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b59688ecf27dedd — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:1223 
            log_tail = "\n".join(run.log_path.read_text().splitlines()[-40:])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71dd5045e0290b42 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:1292 
            value = json.loads(path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15b7d48bc26b50ca — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:1538 
                return json.loads(analysis_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59101b80f0725b2d — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:1570 
        (job_dir / "analysis.json").write_text(report.model_dump_json(indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #482fb7af8e46448a — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:1600 
            job_result = JobResult.model_validate_json(result_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e055b57dc2c6fa8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:2409 
            return json.loads(trajectory_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #887245616a97d552 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:2439 
                return path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5230e4f58ccd6e46 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:2447 
                parsed = json.loads(path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc80828b35233cb8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:2636 
            content = full_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76421b881fa6ac85 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:2666 
                manifest = json.loads(manifest_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1220c9823892d535 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:2726 
                logs["summary"] = analysis_path_md.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9513eae188b77caf — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:2734 
                logs["analysis"] = json.loads(analysis_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73ed4bf4e15d9b1a — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:2742 
                logs["oracle"] = oracle_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a069c89c0ae8f30 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:2750 
                logs["setup"] = setup_stdout_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3c5bcd1465e01c8 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/server.py:2764 
                        {"index": i, "content": stdout_path.read_text()}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a52092827f40bac3 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/task_scanner.py:31 
            return TaskConfig.model_validate_toml(config_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0f84001cf5de274 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/task_scanner.py:46 
                return paths.instruction_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56b3cb6fdc665d90 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/task_scanner.py:63 
                content = step_path.read_text().rstrip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a01cdef8a680838 — Filesystem access.
pkgs/python/[email protected]/src/harbor/viewer/task_scanner.py:105 
            return full_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

accelerate

python dependency
medium telemetry dependency Excluded from app score #6eb89c2d578a8bfa — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/accelerate/tracking.py:650 
            self.writer.track(value, name=key, step=step, **kwargs)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #3377cfabb7dcaf42 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/accelerate/tracking.py:682 
            self.writer.track(aim_image, name=key, step=step, **track_kw)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 226 low-confidence finding(s)
low env_fs dependency Excluded from app score #dca531f7437472a7 — Filesystem access.
pkgs/python/[email protected]/setup.py:60 
    long_description=open("README.md", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c85275643607feb0 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:347 
                    if os.environ.get("ACCELERATE_USE_DEEPSPEED", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf81a62804dbec3e — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:367 
            os.environ["ACCELERATE_USE_DEEPSPEED"] = "true"  # use DeepSpeed if plugin is provided

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ad2098e6319f49f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:381 
        if os.environ.get("ACCELERATE_USE_FSDP", "false").lower() == "true" or isinstance(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #222ef999995e6813 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:390 
                if os.environ.get("ACCELERATE_USE_FSDP", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d299bd936842abdc — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:396 
            os.environ["ACCELERATE_USE_FSDP"] = "true"  # use FSDP if plugin is provided

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dd3407dab4ddeda — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:404 
                MegatronLMPlugin() if os.environ.get("ACCELERATE_USE_MEGATRON_LM", "false").lower() == "true" else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9d734d84de53dbb — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:409 
            os.environ["ACCELERATE_USE_MEGATRON_LM"] = "true"  # use MegatronLM if plugin is provided

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66fb66456ab98901 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:458 
            elif os.environ.get("ACCELERATE_USE_PARALLELISM_CONFIG", "false").lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c45d035011ffa8a — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:1475 
                and os.environ.get("ACCELERATE_BYPASS_DEVICE_MAP", "false") != "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb87a08b5415a5fc — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:1811 
            and os.environ.get("ACCELERATE_BYPASS_DEVICE_MAP", "false") != "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f96cf3c2d58f5c58 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:1885 
                    if os.environ.get("ACCELERATE_BYPASS_DEVICE_MAP", "false") != "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8f5a235d445c202 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:2368 
                        if self.device.type == "hpu" and os.environ.get("PT_HPU_LAZY_MODE", "1") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56b1a8904f2a8968 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:2383 
                os.environ["DEEPSPEED_USE_HPU"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec257a4cee3fb7f2 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:3000 
            if os.environ.get("ACCELERATE_USE_FSDP", "false").lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b516f03fc262d91 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/accelerator.py:3540 
            with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24bc2c3213caf0ec — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/commands/config/config_args.py:30 
    os.environ.get("HF_HOME", os.path.join(os.environ.get("XDG_CACHE_HOME", "~/.cache"), "huggingface"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #413e9b63c3390868 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/commands/config/config_args.py:54 
    with open(config_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b137d65aa6241f4b — Filesystem access.
pkgs/python/[email protected]/src/accelerate/commands/config/config_args.py:131 
        with open(json_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e3cc174d32995ff — Filesystem access.
pkgs/python/[email protected]/src/accelerate/commands/config/config_args.py:144 
        with open(json_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efd06aee9960f215 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/commands/config/config_args.py:151 
        with open(yaml_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a06ee82de1266cae — Filesystem access.
pkgs/python/[email protected]/src/accelerate/commands/config/config_args.py:163 
        with open(yaml_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72ef46d001696f4b — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/commands/config/sagemaker.py:106 
        os.environ["AWS_PROFILE"] = aws_profile

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e06d764ee6fdf4f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/commands/config/sagemaker.py:113 
        os.environ["AWS_ACCESS_KEY_ID"] = aws_access_key_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77c786c8ffc8f7cb — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/commands/config/sagemaker.py:116 
        os.environ["AWS_SECRET_ACCESS_KEY"] = aws_secret_access_key

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c45b216b48949b41 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/commands/config/sagemaker.py:119 
    os.environ["AWS_DEFAULT_REGION"] = aws_region

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #124843adf06cd210 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/commands/launch.py:1055 
        with open(DEEPSPEED_ENVIRONMENT_NAME, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #771aa04971eccc26 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/commands/to_fsdp2.py:156 
    with open(config_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad32ca2a22fca960 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/commands/to_fsdp2.py:173 
    with open(args.output_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d67b097b3d80d9f — Filesystem access.
pkgs/python/[email protected]/src/accelerate/commands/tpu.py:115 
        with open(args.command_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1674b9f3bc40af9d — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/launchers.py:126 
    if any(key.startswith("KAGGLE") for key in os.environ.keys()):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17467dc0347929ed — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/launchers.py:139 
        (os.environ.get("TPU_NAME", None) is not None) or (os.environ.get("PJRT_DEVICE", "") == "TPU")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8993091b39a89c54 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/launchers.py:214 
                if os.environ.get("ACCELERATE_DEBUG_MODE", "false").lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #922847c5ce6214c7 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/launchers.py:276 
                os.environ["PYTORCH_ENABLE_MPS_FALLBACK"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d19a19985aa26e35 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/logging.py:128 
        log_level = os.environ.get("ACCELERATE_LOG_LEVEL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29d34c8b73ae4ae3 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/parallelism_config.py:277 
            self.dp_replicate_size = int(os.environ.get("PARALLELISM_CONFIG_DP_REPLICATE_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c3c1d76bf6df54f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/parallelism_config.py:279 
            self.dp_shard_size = int(os.environ.get("PARALLELISM_CONFIG_DP_SHARD_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc06b0f8518767b0 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/parallelism_config.py:281 
            self.tp_size = int(os.environ.get("PARALLELISM_CONFIG_TP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abf7393d9744845a — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/parallelism_config.py:283 
            self.cp_size = int(os.environ.get("PARALLELISM_CONFIG_CP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8fba71f7ec7a0be — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/parallelism_config.py:285 
            self.cp_backend = os.environ.get("PARALLELISM_CONFIG_CP_BACKEND", "torch")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f51a26cc1e23854 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/parallelism_config.py:287 
            self.sp_size = int(os.environ.get("PARALLELISM_CONFIG_SP_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad34db9cf6369704 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/parallelism_config.py:289 
            self.sp_backend = os.environ.get("PARALLELISM_CONFIG_SP_BACKEND", "deepspeed")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d0804dbc35099c9 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:182 
            env_device = os.environ.get("ACCELERATE_TORCH_DEVICE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fd5cca2a645ea8a — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:189 
                    os.environ.get("ACCELERATE_USE_SAGEMAKER", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07781af6359f1f06 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:190 
                    and os.environ.get("ACCELERATE_SAGEMAKER_DISTRIBUTED_TYPE") != SageMakerDistributedType.NO

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #275910c36a517545 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:202 
                if int(os.environ.get("LOCAL_RANK", -1)) != -1:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17064791fc6898c2 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:204 
                    if os.environ.get("ACCELERATE_USE_DEEPSPEED", "false").lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a4f9f75dbfe15b0 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:213 
                                local_rank = os.environ.get("LOCAL_RANK", -1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dd124fc01b48dc4 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:224 
                            local_rank = os.environ.get("LOCAL_RANK", -1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b8176d7e60b37e7 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:228 
                            and os.environ.get("ACCELERATE_USE_FSDP", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f32b157429277225 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:230 
                                os.environ.get("FSDP_OFFLOAD_PARAMS", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48fec0b54c94a0ad — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:231 
                                or os.environ.get("FSDP_STATE_DICT_TYPE", "SHARDED_STATE_DICT") == "FULL_STATE_DICT"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #328552d5a59b7e63 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:237 
                            and os.environ.get("ACCELERATE_USE_FSDP", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c21a50c2e84282b — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:239 
                                os.environ.get("FSDP_OFFLOAD_PARAMS", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dad73b769354d8ce — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:240 
                                or os.environ.get("FSDP_STATE_DICT_TYPE", "SHARDED_STATE_DICT") == "FULL_STATE_DICT"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1901b6bb6caea4c4 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:249 
                os.environ["RANK"] = str(dist_information.rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea29187545f9bc57 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:250 
                os.environ["WORLD_SIZE"] = str(dist_information.world_size)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e27396a412c1067 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:251 
                os.environ["LOCAL_RANK"] = str(dist_information.local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1788252bb85b91e — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:252 
                os.environ["LOCAL_WORLD_SIZE"] = str(dist_information.local_world_size)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc7c95b3d3f67fa7 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:253 
                if not os.environ.get("MASTER_PORT", None):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6ec507c58ab781e — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:254 
                    os.environ["MASTER_PORT"] = "29500"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1317c2eff51174c7 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:256 
                    not os.environ.get("MASTER_ADDR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d9f8b342d99bfe2 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:302 
                    self.local_process_index = int(os.environ.get("LOCAL_RANK", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9e6b555b3982679 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:307 
                    int(os.environ.get("LOCAL_RANK", -1)) if dist_information is None else dist_information.local_rank

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #360f6f649bcd1c0c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:320 
                if "NCCL_P2P_DISABLE" not in os.environ or "NCCL_IB_DISABLE" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6964f8a60e42037 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:732 
            os.environ["PYTORCH_ENABLE_MPS_FALLBACK"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6da55a2ba5d831c8 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:769 
        elif int(os.environ.get("LOCAL_RANK", -1)) != -1 and not cpu:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c436b3725970aab — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:804 
                int(os.environ.get("LOCAL_RANK", -1)) != -1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #220ffec44d68f3b0 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:964 
                    if os.environ.get("ACCELERATE_DOWNCAST_BF16"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #357f0c2f52720758 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:965 
                        os.environ["XLA_USE_BF16"] = str(0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f21ee7b960e160f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:966 
                        os.environ["XLA_DOWNCAST_BF16"] = str(1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05a99595872a7368 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:969 
                        os.environ["XLA_USE_BF16"] = str(1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2272064b69730c46 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:970 
                        os.environ["XLA_DOWNCAST_BF16"] = str(0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2771296030a07aa — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:972 
            elif os.environ.get("ACCELERATE_USE_DEEPSPEED", "false").lower() == "true" and not cpu:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa444e5b2b7c4f17 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:995 
                if not os.environ.get("ACCELERATE_ALLOW_CP_STANDALONE", "false").lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc1a8b9b17ce7ccb — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:1008 
                if (os.environ.get("ACCELERATE_USE_FSDP", "false").lower() == "true" or fsdp_plugin is not None) or (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1172546c307e0d7c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:1015 
                if os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #692f9c94f6270bc7 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/state.py:1015 
                if os.environ.get(
                    "ACCELERATE_USE_MEGATRON_LM", "false"
                ).lower() == "true" and self.distributed_type not in [

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a5583f1ff6d2212 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/examples.py:89 
    with open(base_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79db6cf3e48120d9 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/examples.py:91 
    with open(os.path.abspath(os.path.join("examples", "nlp_example.py"))) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a15974e2ee0270e — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/examples.py:93 
    with open(feature_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48927b3d5f5134df — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/examples.py:96 
        with open(secondary_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #caf3f5815a38c927 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/scripts/external_deps/test_checkpointing.py:184 
        with open(os.path.join(args.output_dir, f"state_{starting_epoch - 1}.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0e8ce2d5ee3a1d02 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/scripts/external_deps/test_checkpointing.py:224 
            with open(os.path.join(args.output_dir, f"state_{epoch}.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #a71e333fcb9bd442 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/test_utils/scripts/external_deps/test_metrics.py:34 
os.environ["TRANSFORMERS_NO_ADVISORY_WARNINGS"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0079be2ddfce8153 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/scripts/external_deps/test_peak_memory_usage.py:273 
        with open(os.path.join(args.output_dir, "peak_memory_utilization.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #6ed2e70e3e5274c2 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/scripts/external_deps/test_performance.py:235 
        with open(os.path.join(args.output_dir, "all_results.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #84a8540c9e105053 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/test_utils/scripts/test_notebook.py:67 
NUM_PROCESSES = int(os.environ.get("ACCELERATE_NUM_PROCESSES", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #7ad23cbab2297c47 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/scripts/test_script.py:96 
            with open(path, "a+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #5f43911b18fe5c80 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/scripts/test_script.py:99 
            with open(path, "a+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #634cd87408995499 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/test_utils/scripts/test_script.py:104 
        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f320f8920fe6aa21 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/test_utils/testing.py:138 
        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fa16bc2363d1f06 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/test_utils/testing.py:805 
    worker = os.environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4f6bc02dbdfe3db — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/test_utils/testing.py:836 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d171f2cb5d888f9e — Filesystem access.
pkgs/python/[email protected]/src/accelerate/tracking.py:233 
        with open(os.path.join(dir_name, "hparams.yml"), "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62dfac21fa6cf49a — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/tracking.py:733 
        experiment_name = os.environ.get("MLFLOW_EXPERIMENT_NAME", experiment_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59dcb53d957fa1eb — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/tracking.py:734 
        run_id = os.environ.get("MLFLOW_RUN_ID", run_id)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a02227e93d479621 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/tracking.py:735 
        tags = os.environ.get("MLFLOW_TAGS", tags)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff8ae12a04a87524 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/tracking.py:739 
        nested_run = os.environ.get("MLFLOW_NESTED_RUN", nested_run)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94636afd5ae33cc2 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/tracking.py:933 
        task_init_args.setdefault("project_name", os.environ.get("CLEARML_PROJECT", self.user_provided_run_name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd8a999de006a950 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/tracking.py:934 
        task_init_args.setdefault("task_name", os.environ.get("CLEARML_TASK", self.user_provided_run_name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7d4eb54e3446af2 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:415 
            self.margin = int(os.environ.get(env_prefix + "MARGIN", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74a0d5335aa80940 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:417 
            self.interval = int(os.environ.get(env_prefix + "INTERVAL", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb9683a7b6f0514f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:419 
            self.fp8_format = os.environ.get(env_prefix + "FORMAT", "HYBRID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0289e0cebd815c52 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:424 
            self.amax_compute_algo = os.environ.get(env_prefix + "AMAX_COMPUTE_ALGO", "most_recent")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f89695b17a2585b5 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:429 
            self.amax_history_len = int(os.environ.get(env_prefix + "AMAX_HISTORY_LEN", 1024))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bed4ec91880c43d9 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:451 
            self.opt_level = os.environ.get(env_prefix + "OPT_LEVEL", "O2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a83dac572740a7b6 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:474 
            self.backend = os.environ.get(env_prefix + "BACKEND", default_backend)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df907f3c15250174 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1093 
            self.backend = os.environ.get(prefix + "BACKEND", "no")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4122f4280d4f67c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1097 
            self.mode = os.environ.get(prefix + "MODE", "default")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #710f7239bd59f2dd — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1099 
            self.fullgraph = str_to_bool(os.environ.get(prefix + "USE_FULLGRAPH", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #898513d73fcd0b90 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1102 
                str_to_bool(os.environ.get(prefix + "USE_REGIONAL_COMPILATION", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef4a4f8d5c97b10b — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1105 
        if self.dynamic is None and os.environ.get(prefix + "USE_DYNAMIC", None) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #140461ab78161c42 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1106 
            self.dynamic = str_to_bool(os.environ.get(prefix + "USE_DYNAMIC", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f5b706fa33d2242 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1228 
            gas = os.environ.get("ACCELERATE_GRADIENT_ACCUMULATION_STEPS", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a53966a84f6092c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1232 
            gradient_clipping = os.environ.get("ACCELERATE_GRADIENT_CLIPPING", "auto")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fcbb32861843072 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1236 
            self.zero_stage = int(os.environ.get("ACCELERATE_DEEPSPEED_ZERO_STAGE", 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #683dbbcda4e2f364 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1239 
            self.offload_optimizer_device = os.environ.get("ACCELERATE_DEEPSPEED_OFFLOAD_OPTIMIZER_DEVICE", "none")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86708a6c97c52324 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1242 
            self.offload_param_device = os.environ.get("ACCELERATE_DEEPSPEED_OFFLOAD_PARAM_DEVICE", "none")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c68c38185bd726a — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1245 
            self.offload_optimizer_nvme_path = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f957603e02253ab5 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1245 
            self.offload_optimizer_nvme_path = os.environ.get(
                "ACCELERATE_DEEPSPEED_OFFLOAD_OPTIMIZER_NVME_PATH", "none"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34d8f9f2742dd200 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1250 
            self.offload_param_nvme_path = os.environ.get("ACCELERATE_DEEPSPEED_OFFLOAD_PARAM_NVME_PATH", "none")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ffcdac2d43aaa2f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1254 
                os.environ.get("ACCELERATE_DEEPSPEED_ZERO3_SAVE_16BIT_MODEL", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3aa080f8d06fa6a — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1257 
            self.enable_msamp = os.environ.get("ACCELERATE_FP8_BACKEND", None) == "MSAMP"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81ba35fce7766107 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1260 
            self.msamp_opt_level = os.environ.get("ACCELERATE_FP8_OPT_LEVEL", "O1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b72bc09424daa68 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1263 
            self.hf_ds_config = os.environ.get("ACCELERATE_DEEPSPEED_CONFIG_FILE", "none")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3df21feb6e05f07c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1328 
                    os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a033b32e84c3dc3 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1328 
                    os.environ.get(
                        "ACCELERATE_DEEPSPEED_ZERO3_INIT",
                        str(self.hf_ds_config.is_zero3()),
                    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90ef6cad71f08ed9 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1521 
        deepspeed_fields_from_accelerate_config = os.environ.get("ACCELERATE_CONFIG_DS_FIELDS", "").split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4433ea173480df8c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1534 
            self.transformer_moe_cls_names = os.environ.get("ACCELERATE_DEEPSPEED_MOE_LAYER_CLS_NAMES", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12aee704ee8e5493 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1821 
            self.fsdp_version = int(os.environ.get(env_prefix + "VERSION", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04d8c3122d8a0c57 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1836 
                self.sharding_strategy = os.environ.get(env_prefix + "SHARDING_STRATEGY", "FULL_SHARD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd90ca962ed8b2bc — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1847 
            reshard_after_forward = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fce23ea32bea3b87 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1847 
            reshard_after_forward = os.environ.get(
                env_prefix + "RESHARD_AFTER_FORWARD",
                "true" if self.fsdp_version == 2 else "FULL_SHARD",
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3241727e4cd4a53b — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1877 
            self.cpu_offload = str_to_bool(os.environ.get(env_prefix + "OFFLOAD_PARAMS", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89ba07233761ee97 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1883 
            self.backward_prefetch = os.environ.get(env_prefix + "BACKWARD_PREFETCH", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a54088f05ba47c01 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1900 
            self.auto_wrap_policy = os.environ.get(env_prefix + "AUTO_WRAP_POLICY", "NO_WRAP")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24b938c920eb7461 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1914 
                    self.transformer_cls_names_to_wrap = os.environ.get(env_prefix + "TRANSFORMER_CLS_TO_WRAP", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24cd027fe64a0548 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1920 
                    self.min_num_params = int(os.environ.get(env_prefix + "MIN_NUM_PARAMS", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01d4b68af0830bc5 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1929 
            self.use_orig_params = str_to_bool(os.environ.get(env_prefix + "USE_ORIG_PARAMS", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b151aa025c9fa1e2 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1935 
            self.sync_module_states = str_to_bool(os.environ.get(env_prefix + "SYNC_MODULE_STATES", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da7bc92a84341067 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1944 
            self.forward_prefetch = str_to_bool(os.environ.get(env_prefix + "FORWARD_PREFETCH", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db0239e98f16cd25 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1950 
                str_to_bool(os.environ.get(env_prefix + "ACTIVATION_CHECKPOINTING", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #472f45a0d9413251 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1954 
            self.ignored_modules = os.environ.get(env_prefix + "IGNORED_MODULES", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8c6e2c94142cc4f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1958 
                str_to_bool(os.environ.get(env_prefix + "CPU_RAM_EFFICIENT_LOADING", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33d8ecbe689309fd — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:1962 
            os.environ[env_prefix + "CPU_RAM_EFFICIENT_LOADING"] = str(self.cpu_ram_efficient_loading)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40dbd8c905e48370 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2029 
            self.state_dict_type = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2c56e89e6f16233 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2029 
            self.state_dict_type = os.environ.get(
                "FSDP_STATE_DICT_TYPE",
                "FULL_STATE_DICT" if self.fsdp_version == 1 else "SHARDED_STATE_DICT",
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51db5b29f7382a14 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2226 
            self.cp_comm_strategy = os.environ.get("PARALLELISM_CONFIG_CP_COMM_STRATEGY", "allgather")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c4c46a2a2db4cac — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2258 
                os.environ.get("PARALLELISM_CONFIG_SP_SEQ_LENGTH_IS_VARIABLE", "true").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #699487b6f52beb0b — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2262 
            if "PARALLELISM_CONFIG_SP_SEQ_LENGTH" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c97b7855ec583d0 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2267 
                self.sp_seq_length = os.environ.get("PARALLELISM_CONFIG_SP_SEQ_LENGTH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #623a56ed05815272 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2271 
            self.sp_attn_implementation = os.environ.get("PARALLELISM_CONFIG_SP_ATTN_IMPLEMENTATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0ca4f25c706226c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2611 
            self.tp_degree = int(os.environ.get(prefix + "TP_DEGREE", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12c128b2bedc48b2 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2613 
            self.pp_degree = int(os.environ.get(prefix + "PP_DEGREE", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6e20a1cfb91c9d3 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2615 
            self.use_custom_fsdp = str_to_bool(os.environ.get(prefix + "USE_CUSTOM_FSDP", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #324690e3059ce34c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2617 
            self.no_load_optim = str_to_bool(os.environ.get(prefix + "NO_LOAD_OPTIM", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50ff4cdd763475aa — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2619 
            self.eod_mask_loss = str_to_bool(os.environ.get(prefix + "EOD_MASK_LOSS", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c96197c18474b8e — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2621 
            self.no_save_optim = str_to_bool(os.environ.get(prefix + "NO_SAVE_OPTIM", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58bca07736a5550f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2623 
            self.optimizer_cpu_offload = str_to_bool(os.environ.get(prefix + "OPTIMIZER_CPU_OFFLOAD", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6810debb6f676732 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2626 
                str_to_bool(os.environ.get(prefix + "OVERLAP_CPU_OPTIMIZER_D2H_H2D", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cd20183f71cbde0 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2630 
                str_to_bool(os.environ.get(prefix + "USE_PRECISION_AWARE_OPTIMIZER", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd7f8a2f0557d69c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2633 
            if os.environ.get(prefix + "DECODER_LAST_PIPELINE_NUM_LAYERS") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe471c552002e04c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2635 
                    os.environ.get(prefix + "DECODER_LAST_PIPELINE_NUM_LAYERS", 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edfa52c4e150a22c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2640 
            self.num_micro_batches = int(os.environ.get(prefix + "NUM_MICRO_BATCHES", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd764585b2a5f216 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2642 
            self.gradient_clipping = float(os.environ.get(prefix + "GRADIENT_CLIPPING", 1.0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3501acd5b61d47b — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2644 
            self.recompute_activations = str_to_bool(os.environ.get(prefix + "RECOMPUTE_ACTIVATIONS", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a622c0eb5c863a19 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2647 
                str_to_bool(os.environ.get(prefix + "USE_DISTRIBUTED_OPTIMIZER", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5161769b93be0934 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2650 
            self.sequence_parallelism = str_to_bool(os.environ.get(prefix + "SEQUENCE_PARALLELISM", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52a1737776dfea1f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2652 
            self.recompute_granularity = os.environ.get(prefix + "RECOMPUTE_GRANULARITY", "full")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f831e140c7137827 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2654 
            self.recompute_method = os.environ.get(prefix + "RECOMPUTE_METHOD", "uniform")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc015426d4d23b9c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2656 
            self.recompute_num_layers = int(os.environ.get(prefix + "RECOMPUTE_NUM_LAYERS", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75fb3da659097b49 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2658 
            self.attention_backend = str_to_bool(os.environ.get(prefix + "ATTENTION_BACKEND", "True")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #350d2eeec512a3c0 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2660 
            self.expert_model_parallel_size = int(os.environ.get(prefix + "EXPERT_MODEL_PARALLEL_SIZE", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7c3a04a33e6f7ce — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2662 
            self.context_parallel_size = int(os.environ.get(prefix + "CONTEXT_PARALLEL_SIZE", 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69128373e366ca3d — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2664 
            self.attention_dropout = float(os.environ.get(prefix + "ATTENTION_DROPOUT", "0.0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5687619f0a3df7df — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2666 
            self.hidden_dropout = float(os.environ.get(prefix + "HIDDEN_DROPOUT", "0.0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f67059488f2b7566 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2669 
                str_to_bool(os.environ.get(prefix + "ATTENTION_SOFTMAX_IN_FP32", "True")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fc93e3ab9bcec13 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2672 
            self.expert_tensor_parallel_size = int(os.environ.get(prefix + "EXPERT_TENSOR_PARALLEL_SIZE", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e5830164a3abf7c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2675 
                str_to_bool(os.environ.get(prefix + "CALCULATE_PER_TOKEN_LOSS", "True")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c2495c0d04e03b0 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/dataclasses.py:2679 
                str_to_bool(os.environ.get(prefix + "USE_ROTARY_POSITION_EMBEDDINGS", "True")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f8468dc8844844e — Filesystem access.
pkgs/python/[email protected]/src/accelerate/utils/deepspeed.py:142 
            with open(config_file_or_dict, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8f49ee7f50a6c70 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:77 
        val = int(os.environ.get(e, -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d8794d2a6b91479 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:85 
    value = os.environ.get(key, str(default))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa742093d239c09b — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:90 
    value = os.environ.get(key, str(default))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #475318bfea2e59ec — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:160 
            command = f"{os.environ['systemdrive']}\\Program Files\\NVIDIA Corporation\\NVSMI\\nvidia-smi.exe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2b6fdd1bbbd79ef — Filesystem access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:333 
                    with open(f"/sys/devices/system/node/node{numa_node}/cpulist") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe9a0058bd13284d — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:406 
    _old_os_environ = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a10dbfb9a03e8ebc — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:407 
    os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d63dfcc26f07b60a — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:412 
        os.environ.clear()  # clear any added keys,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #529559ac79354620 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:413 
        os.environ.update(_old_os_environ)  # then restore previous environment

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #486a945e9ba9eceb — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:437 
        if key in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6aeb3ee6995c57ec — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:438 
            existing_vars[key] = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a120ee41ced02794 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:439 
        os.environ[key] = str(value)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e2dcc26e54575b8 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:448 
                os.environ[key] = existing_vars[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f6917af70449a2a — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:450 
                os.environ.pop(key, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87a1fb035882513b — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:477 
        existing_vars = {k: v for k, v in os.environ.items() if k.startswith(prefix)}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e496dd75937b560f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:482 
            for key in [k for k in os.environ if k.startswith(prefix)]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc993d91b92c3c0e — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:484 
                    os.environ[key] = existing_vars[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3981440fe6d9e2a2 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/environment.py:486 
                    os.environ.pop(key, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #041a1db9f45f19f1 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/fsdp_utils.py:44 
    if "ACCELERATE_USE_FSDP" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b33ff3e52c09997 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/fsdp_utils.py:45 
        os.environ["ACCELERATE_USE_FSDP"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e055eec418487598 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/fsdp_utils.py:46 
    os.environ["FSDP_CPU_RAM_EFFICIENT_LOADING"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0465239d4f93d73 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/fsdp_utils.py:53 
    os.environ["FSDP_CPU_RAM_EFFICIENT_LOADING"] = "False"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf9b1780e93a0968 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/imports.py:230 
    if str_to_bool(os.environ.get("ACCELERATE_USE_MEGATRON_LM", "False")) == 1:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fa9c037caa3ef3f — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:132 
    current_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29ef9682b2968184 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:257 
    current_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90ab3c13b1132a66 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:528 
    current_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35f07e333f60eb9e — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:660 
    os.environ["AWS_DEFAULT_REGION"] = sagemaker_config.region

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21b998186705ba6c — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:664 
        os.environ["AWS_PROFILE"] = sagemaker_config.profile

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14786c60cba5142d — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:666 
        os.environ["AWS_ACCESS_KEY_ID"] = args.aws_access_key_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b65437205f9472ae — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:667 
        os.environ["AWS_SECRET_ACCESS_KEY"] = args.aws_secret_access_key

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #897ea82ab8e60280 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:723 
        with open(sagemaker_config.sagemaker_inputs_file) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f729655e43aacaec — Filesystem access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:736 
        with open(sagemaker_config.sagemaker_metrics_file) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d52cdb10a617f61b — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:778 
    paths = [p for p in os.environ.get(env_var_name, "").split(":") if len(p) > 0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea3a83987e775909 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:803 
            world_size = int(os.environ.get("WORLD_SIZE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37659204e871c535 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:804 
            rdv_file = os.environ.get("ACCELERATE_DEBUG_RDV_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9e28d9819cc40e8 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:821 
            os.environ["LOCAL_RANK"] = str(index)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a9c0bf7ba2e1052 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:822 
            nproc = int(os.environ.get("NPROC", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1caba0ea5b01cc0 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:823 
            node_rank = int(os.environ.get("NODE_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b310c0993ed5745 — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:824 
            os.environ["RANK"] = str(nproc * node_rank + index)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c4e20c632fd16fe — Environment-variable access.
pkgs/python/[email protected]/src/accelerate/utils/launch.py:826 
        os.environ["FORK_LAUNCHED"] = str(1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35c196592e3c7072 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/utils/modeling.py:1926 
        with open(index_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f017357231d397e — Filesystem access.
pkgs/python/[email protected]/src/accelerate/utils/offload.py:75 
        with open(offload_index_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #245851afc1684da1 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/utils/offload.py:81 
    with open(offload_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1bb915e49fe69957 — Filesystem access.
pkgs/python/[email protected]/src/accelerate/utils/offload.py:154 
            with open(os.path.join(save_folder, "index.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

aiohttp

python dependency
expand_more 19 low-confidence finding(s)
low env_fs dependency Excluded from app score #55be460b11c71dbf — Filesystem access.
pkgs/python/[email protected]/aiohttp/cookiejar.py:207 
        with open(
            file_path,
            mode="w",
            encoding="utf-8",
            opener=lambda path, flags: os.open(path, flags, 0o600),
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98602951a35c9691 — Environment-variable access.
pkgs/python/[email protected]/aiohttp/helpers.py:73 
NO_EXTENSIONS = bool(os.environ.get("AIOHTTP_NO_EXTENSIONS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80514129855168e5 — Environment-variable access.
pkgs/python/[email protected]/aiohttp/helpers.py:82 
    not sys.flags.ignore_environment and bool(os.environ.get("PYTHONASYNCIODEBUG"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7ce432d74b810d3 — Environment-variable access.
pkgs/python/[email protected]/aiohttp/helpers.py:228 
    netrc_env = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1593a5f04d056e8e — Environment-variable access.
pkgs/python/[email protected]/aiohttp/web_fileresponse.py:50 
NOSENDFILE: Final[bool] = bool(os.environ.get("AIOHTTP_NOSENDFILE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #ff311a6ae2be76b9 — Environment-variable access.
pkgs/python/[email protected]/docs/conf.py:21 
    os.getenv("READTHEDOCS", "False") == "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #13385a797e983663 — Environment-variable access.
pkgs/python/[email protected]/docs/conf.py:22 
    and os.environ["READTHEDOCS_VERSION_TYPE"] == "tag"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #f0e47b5ed9a782f5 — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:31 
with open(_version_path, encoding="latin1") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c00faa60220a8920 — Filesystem access.
pkgs/python/[email protected]/examples/web_ws.py:20 
        with open(WS_FILE, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3f8799c32cc9691 — Filesystem access.
pkgs/python/[email protected]/requirements/sync-direct-runtime-deps.py:12 
data = tomllib.loads(Path("pyproject.toml").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d9fb33c3cb7959e — Filesystem access.
pkgs/python/[email protected]/requirements/sync-direct-runtime-deps.py:19 
with open(Path("requirements", "runtime-deps.in"), "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a97755575ec7c52 — Environment-variable access.
pkgs/python/[email protected]/setup.py:13 
    os.environ.get("AIOHTTP_USE_SYSTEM_DEPS", os.environ.get("USE_SYSTEM_DEPS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59d3c01af87e5372 — Environment-variable access.
pkgs/python/[email protected]/setup.py:15 
NO_EXTENSIONS: bool = bool(os.environ.get("AIOHTTP_NO_EXTENSIONS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a0f4056e1c299c8 — Environment-variable access.
pkgs/python/[email protected]/setup.py:16 
CYTHON_TRACING: bool = bool(os.environ.get("AIOHTTP_CYTHON_TRACE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #43a00a10b007c494 — Filesystem access.
pkgs/python/[email protected]/tools/check_sum.py:30 
        hasher.update(full_src.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #94aa91f0ccf436ef — Filesystem access.
pkgs/python/[email protected]/tools/check_sum.py:37 
        dst_hash = dst.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #cd4a688229184d89 — Filesystem access.
pkgs/python/[email protected]/tools/check_sum.py:41 
        dst.write_text(src_hash)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #84ae852af4869160 — Filesystem access.
pkgs/python/[email protected]/tools/cleanup_changes.py:30 
    changes = (root / "CHANGES.rst").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #8688de94556797f7 — Filesystem access.
pkgs/python/[email protected]/tools/gen.py:16 
    code = compile(hdrs_file.read_text(), str(hdrs_file), "exec")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

datasets

python dependency
expand_more 77 low-confidence finding(s)
low env_fs dependency Excluded from app score #981930805c0f222d — Filesystem access.
pkgs/python/[email protected]/setup.py:249 
    long_description=open("README.md", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41e761c7922f9d16 — Filesystem access.
pkgs/python/[email protected]/src/datasets/arrow_dataset.py:2065 
        with open(dataset_state_json_path, encoding="utf-8") as state_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08bdee6a8b596d20 — Filesystem access.
pkgs/python/[email protected]/src/datasets/arrow_dataset.py:2067 
        with open(dataset_info_path, encoding="utf-8") as dataset_info_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ffc0dc6848fd2f2 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/arrow_dataset.py:3537 
            prev_env = deepcopy(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e157107a5aeb015 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/arrow_dataset.py:3550 
            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e217c9361314f2d — Environment-variable access.
pkgs/python/[email protected]/src/datasets/arrow_dataset.py:3552 
            prev_env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7cb625583be5754 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/arrow_dataset.py:3621 
                        os.environ = prev_env

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea5546fbfd664753 — Filesystem access.
pkgs/python/[email protected]/src/datasets/arrow_dataset.py:6886 
        legacy_dataset_info: dict = json.loads(fs.read_text(config.DATASETDICT_INFOS_FILENAME, encoding="utf-8")).get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e81fa68347ee42b7 — Filesystem access.
pkgs/python/[email protected]/src/datasets/arrow_dataset.py:6895 
        dataset_card = DatasetCard(fs.read_text(config.REPOCARD_FILENAME, newline="", encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fae51179cacb73d5 — Filesystem access.
pkgs/python/[email protected]/src/datasets/arrow_dataset.py:6993 
        legacy_dataset_infos: dict = json.loads(fs.read_text(config.DATASETDICT_INFOS_FILENAME, encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ddce2281e7d99a2 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:21 
HF_ENDPOINT = os.environ.get("HF_ENDPOINT", "https://huggingface.co")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ab7765909b23613 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:42 
USE_TF = os.environ.get("USE_TF", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d17862b6e9f1b84 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:43 
USE_TORCH = os.environ.get("USE_TORCH", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd29d23cf0eb5dfe — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:44 
USE_JAX = os.environ.get("USE_JAX", "AUTO").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ead2907a074311fb — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:154 
XDG_CACHE_HOME = os.getenv("XDG_CACHE_HOME", DEFAULT_XDG_CACHE_HOME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0229427703579f52 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:156 
HF_CACHE_HOME = os.path.expanduser(os.getenv("HF_HOME", DEFAULT_HF_CACHE_HOME))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #061acfa3ca61851d — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:159 
HF_DATASETS_CACHE = Path(os.getenv("HF_DATASETS_CACHE", DEFAULT_HF_DATASETS_CACHE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81fe7484c8818b1e — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:162 
HF_MODULES_CACHE = Path(os.getenv("HF_MODULES_CACHE", DEFAULT_HF_MODULES_CACHE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49087f9e5bfcda2c — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:166 
DOWNLOADED_DATASETS_PATH = Path(os.getenv("HF_DATASETS_DOWNLOADED_DATASETS_PATH", DEFAULT_DOWNLOADED_DATASETS_PATH))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c434f9e3d397ade4 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:170 
EXTRACTED_DATASETS_PATH = Path(os.getenv("HF_DATASETS_EXTRACTED_DATASETS_PATH", DEFAULT_EXTRACTED_DATASETS_PATH))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fff8e9ecfbcc2a9 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:177 
    os.environ.get("HF_UPDATE_DOWNLOAD_COUNTS", "AUTO").upper() in ENV_VARS_TRUE_AND_AUTO_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1903bafc0f2fe386 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:214 
_offline = os.environ.get("HF_DATASETS_OFFLINE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4c1d07bb2680880 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:223 
__HF_DATASETS_DISABLE_PROGRESS_BARS = os.environ.get("HF_DATASETS_DISABLE_PROGRESS_BARS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d8e2cf65ba96627 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/config.py:232 
IN_MEMORY_MAX_SIZE = float(os.environ.get("HF_DATASETS_IN_MEMORY_MAX_SIZE", DEFAULT_IN_MEMORY_MAX_SIZE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57f015a7643089fb — Environment-variable access.
pkgs/python/[email protected]/src/datasets/download/download_manager.py:212 
                if os.environ.get("HF_DATASETS_STACK_MULTIPROCESSING_DOWNLOAD_PROGRESS_BARS") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44a527eb8f99ec5c — Filesystem access.
pkgs/python/[email protected]/src/datasets/features/features.py:1179 
        with open(names_filepath, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47c152636f257bd7 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/fingerprint.py:53 
        tmpdir = os.environ.get("TMPDIR") or os.environ.get("TEMP") or os.environ.get("TMP")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1993f1f59f877235 — Filesystem access.
pkgs/python/[email protected]/src/datasets/info.py:344 
            with open(dataset_infos_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #810f003b4ef04061 — Filesystem access.
pkgs/python/[email protected]/src/datasets/info.py:373 
            with open(os.path.join(dataset_infos_dir, config.DATASETDICT_INFOS_FILENAME), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cba80712344cdafc — Filesystem access.
pkgs/python/[email protected]/src/datasets/load.py:434 
            with open(standalone_yaml_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #562c8525be271253 — Filesystem access.
pkgs/python/[email protected]/src/datasets/load.py:488 
            with open(os.path.join(self.path, config.DATASETDICT_INFOS_FILENAME), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2320cb2083ab0c71 — Filesystem access.
pkgs/python/[email protected]/src/datasets/load.py:612 
            with open(standalone_yaml_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #580c2d344854db5f — Filesystem access.
pkgs/python/[email protected]/src/datasets/load.py:697 
            with open(dataset_infos_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b912ab5af46ad245 — Filesystem access.
pkgs/python/[email protected]/src/datasets/load.py:873 
            dataset_card_data = DatasetCard(hffs.read_text(readme_path, newline="", encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a360003a7a01d32d — Filesystem access.
pkgs/python/[email protected]/src/datasets/load.py:877 
            standalone_yaml_data = yaml.safe_load(hffs.read_text(standalone_yaml_path, newline="", encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbe1e81843b3ed88 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/arrow/arrow.py:40 
                    with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ed6c0a620531bee — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/arrow/arrow.py:62 
            with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee9af7f6dcac02e4 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/cache/cache.py:52 
            or json.loads(Path(cached_directory_path, "dataset_info.json").read_text(encoding="utf-8"))["config_name"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #256a09a917707648 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/cache/cache.py:80 
            or json.loads(Path(_cached_directory_path, "dataset_info.json").read_text(encoding="utf-8"))["config_name"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b25e30ac560d5200 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/cache/cache.py:185 
            with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41b385597df9989e — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/conll/conll.py:126 
                with open(file, encoding=self.config.encoding, errors=self.config.encoding_errors) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11cca7c02b40997a — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/eval/eval.py:62 
            with open(sample_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d813c34f58ebbf52 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/folder_based_builder/folder_based_builder.py:313 
            with open(metadata_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6e4dd456f5d00b4 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/folder_based_builder/folder_based_builder.py:352 
            with open(metadata_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #942e5a8db49f30c5 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/hdf5/hdf5.py:59 
                    with open(first_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c49f08e39f909a70 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/hdf5/hdf5.py:75 
                with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f49283c4a8b68c3c — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/json/json.py:159 
                    with open(file, encoding=self.config.encoding, errors=self.config.encoding_errors) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf334dac9177d88c — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/json/json.py:172 
                    trace_events = trace_file.read_text(encoding="utf-8").splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #744e6ff9782ee54f — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/json/json.py:199 
                    with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef5a80a3255ff369 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/json/json.py:288 
                                    with open(
                                        file, encoding=self.config.encoding, errors=self.config.encoding_errors
                                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a58fe1b11592f0d4 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/lance/lance.py:86 
            data = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0e0fd9a8668852a — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/pandas/pandas.py:55 
            with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2031ce67a8cb800f — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/parquet/parquet.py:126 
                        with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47cb206f7780d951 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/parquet/parquet.py:173 
                with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67a8b43458edfb69 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/parquet/parquet.py:199 
                with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32f434f8aeef55c8 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/spark/spark.py:148 
            open(probe_file, "a")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c17fbcc16ce502b9 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/text/text.py:94 
                with open(file, encoding=self.config.encoding, errors=self.config.encoding_errors) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac90fc1fd3d745f9 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/tsfile/tsfile.py:736 
            with open(file, "rb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #295633fbcbd16a88 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/webdataset/_tenbin.py:276 
    with open(fname, "wb") as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f35875b780b084d5 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/webdataset/_tenbin.py:284 
    with open(fname, "rb") as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6928269c117fd013 — Filesystem access.
pkgs/python/[email protected]/src/datasets/packaged_modules/xml/xml.py:67 
            with open(file, encoding=self.config.encoding, errors=self.config.encoding_errors) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08b09592fead90c4 — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/extract.py:72 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1d809cdb0bf3969 — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/extract.py:141 
            with open(output_path, "wb") as extracted_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67b464e5df38203c — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/extract.py:172 
            with open(path, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25ec8740f2728d13 — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/extract.py:235 
            with open(output_path, "wb") as extracted_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20196eefdaaba663 — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/extract.py:301 
        with open(input_path, "rb") as ifh, open(output_path, "wb") as ofh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb2d606234491139 — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/extract.py:311 
            with open(output_path, "wb") as extracted_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34f97163daa5fbbe — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/extract.py:377 
            with open(output_path, "wb") as extracted_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50d9ea4e85cc244b — Environment-variable access.
pkgs/python/[email protected]/src/datasets/utils/file_utils.py:302 
    return patch.dict(os.environ, {"HF_DATASETS_STACK_MULTIPROCESSING_DOWNLOAD_PROGRESS_BARS": "1"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fec86102a7f3bd2 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/utils/file_utils.py:324 
            if os.environ.get("HF_DATASETS_STACK_MULTIPROCESSING_DOWNLOAD_PROGRESS_BARS") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbeb47bea5c4fa5c — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/file_utils.py:403 
        with open(incomplete_path, "w+b") as temp_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #227c567ab29de8f5 — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/file_utils.py:414 
        with open(meta_path, "w", encoding="utf-8") as meta_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc694d5e080839c0 — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/file_utils.py:967 
        return open(main_hop, mode, *args, **kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2240f0888e2265b — Filesystem access.
pkgs/python/[email protected]/src/datasets/utils/info_utils.py:84 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9050194b74e7803 — Environment-variable access.
pkgs/python/[email protected]/src/datasets/utils/logging.py:54 
    env_level_str = os.getenv("DATASETS_VERBOSITY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e91f6f346f83f6fc — Environment-variable access.
pkgs/python/[email protected]/src/datasets/utils/tf_utils.py:413 
        os.environ["TF_CPP_MIN_LOG_LEVEL"] = "3"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ac68990f9ab8dfd — Environment-variable access.
pkgs/python/[email protected]/src/datasets/utils/tqdm.py:115 
        elif kwargs.get("disable") is None and os.getenv("TQDM_POSITION") == "-1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

deepspeed

python dependency
expand_more 326 low-confidence finding(s)
low env_fs dependency Excluded from app score #ce1e049a6244b8ce — Environment-variable access.
pkgs/python/[email protected]/accelerator/cpu_accelerator.py:65 
        return os.environ.get('LOCAL_RANK', 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73073c6cd3733741 — Environment-variable access.
pkgs/python/[email protected]/accelerator/cpu_accelerator.py:71 
        device_count = int(os.environ.get('LOCAL_SIZE', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #371498bf631b3de7 — Environment-variable access.
pkgs/python/[email protected]/accelerator/cuda_accelerator.py:187 
        if "CUDA_VISIBLE_DEVICES" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dab919160ca20e20 — Environment-variable access.
pkgs/python/[email protected]/accelerator/cuda_accelerator.py:188 
            ids = list(map(int, os.environ.get("CUDA_VISIBLE_DEVICES", "").split(",")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bdf2c677c58e96b — Environment-variable access.
pkgs/python/[email protected]/accelerator/cuda_accelerator.py:214 
        allow_deprecated_fp16 = os.environ.get('DS_ALLOW_DEPRECATED_FP16', '0') == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57e5be004552a947 — Environment-variable access.
pkgs/python/[email protected]/accelerator/hpu_accelerator.py:37 
            if key not in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc985c73205a68aa — Environment-variable access.
pkgs/python/[email protected]/accelerator/hpu_accelerator.py:38 
                os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #083995c4d6effa2a — Environment-variable access.
pkgs/python/[email protected]/accelerator/real_accelerator.py:59 
    if "DS_ACCELERATOR" in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8c55da428e4a829 — Environment-variable access.
pkgs/python/[email protected]/accelerator/real_accelerator.py:60 
        accelerator_name = os.environ["DS_ACCELERATOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc1baeed2210f961 — Filesystem access.
pkgs/python/[email protected]/deepspeed/__init__.py:369 
        with open(config, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eae1399b1fcdfa02 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/accelerator/cpu_accelerator.py:65 
        return os.environ.get('LOCAL_RANK', 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0bedfae198a8b53 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/accelerator/cpu_accelerator.py:71 
        device_count = int(os.environ.get('LOCAL_SIZE', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8b617442daf9d5c — Environment-variable access.
pkgs/python/[email protected]/deepspeed/accelerator/cuda_accelerator.py:187 
        if "CUDA_VISIBLE_DEVICES" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c960a75d3f341fbf — Environment-variable access.
pkgs/python/[email protected]/deepspeed/accelerator/cuda_accelerator.py:188 
            ids = list(map(int, os.environ.get("CUDA_VISIBLE_DEVICES", "").split(",")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a0414f77bd1e1dc — Environment-variable access.
pkgs/python/[email protected]/deepspeed/accelerator/cuda_accelerator.py:214 
        allow_deprecated_fp16 = os.environ.get('DS_ALLOW_DEPRECATED_FP16', '0') == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #522dd512e8fc846d — Environment-variable access.
pkgs/python/[email protected]/deepspeed/accelerator/hpu_accelerator.py:37 
            if key not in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #359af96e712de934 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/accelerator/hpu_accelerator.py:38 
                os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d557aaafc63cb90 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/accelerator/real_accelerator.py:59 
    if "DS_ACCELERATOR" in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce17240a97d8710a — Environment-variable access.
pkgs/python/[email protected]/deepspeed/accelerator/real_accelerator.py:60 
        accelerator_name = os.environ["DS_ACCELERATOR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5498bd4f76f2fd6 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:136 
            with open(os.path.join(self.results_dir, 'summary.txt'), 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cddf1fae8afcafa9 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:152 
            with open(os.path.join(self.results_dir, 'summary.txt'), 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b97389edfaf784df — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:184 
                return json.load(open(user_config_file, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d00123681327220a — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:332 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b967e44e6e62b903 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:337 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6e013c4abd614fc — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:342 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb9ceaaec824702d — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:347 
            template_config = hjson.load(open(template_path, 'r'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32a86b57f6d123ba — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:408 
            self.mlflow_parent_id = os.environ['MLFLOW_RUN_ID']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76c4f5f503f0595f — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:689 
        with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea29f151a0cbce44 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:704 
            with open(model_info_path, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a11b1cd330c00c93 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:768 
            with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b6b7fa24a85ca83 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:782 
                    with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48eed31174c0dc5d — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:789 
                            os.environ.pop('MLFLOW_RUN_ID')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #214b174d2d647a19 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:794 
                            os.environ['MLFLOW_RUN_ID'] = self.mlflow_parent_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6108175f43077b5 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:828 
                with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c173a342985f3a5 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:832 
                        os.environ.pop('MLFLOW_RUN_ID')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #875e572e70788b35 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:837 
                        os.environ['MLFLOW_RUN_ID'] = self.mlflow_parent_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b30e7f5faa0e39a — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:1065 
        with open(exp_path, 'w', buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd4981f981991cec — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:1083 
            with open(os.path.join(exp_dir, "cmd.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16873a58f801b429 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:1086 
            ds_config = hjson.load(open(os.path.join(exp_dir, "ds_config.json"), "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4373168e47e2b6d1 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:1090 
            json.dump(ds_config, open(ds_config_path, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1f310242a27911d — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/autotuner.py:1093 
            with open(cmd_path, "w") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c15b67383afc282 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:64 
                with open(exp_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47c4e3751a17848f — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:207 
            with open(path, 'a') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1ec5fe36a268e97 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:232 
                with open(metric_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1261f30b0e6fd57 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:291 
    if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90faaf529d2db332 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:292 
        infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d9c766e34866e08 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:293 
    elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18fb3f65161fcca4 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:294 
        infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8991f5c5029728f8 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:303 
    if "USER" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0261c0ca8eeaecfd — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:304 
        user = os.environ["USER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d6d6bd4cd71dd7e — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:341 
    with open(exp["ds_config_path"], "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b491de61eb443f1 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:348 
    with open(os.path.join(exp_dir, "exp.json"), "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc2a5173a91934d9 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:374 
    with open(os.path.join(exp_dir, "cmd.txt"), "w", buffering=BUFSIZE) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a18ea404aef153a — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:384 
    with open(os.path.join(exp_dir, "stdout.log"), "wb") as out, open(os.path.join(exp_dir, "stderr.log"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3019d10aea007d7 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:384 
    with open(os.path.join(exp_dir, "stdout.log"), "wb") as out, open(os.path.join(exp_dir, "stderr.log"),
                                                                      "wb") as err:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a54fd30418ecf3f8 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/autotuning/scheduler.py:402 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #035099f4415c5506 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/tuner/model_based_tuner.py:136 
            with open(p, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ceee183b6b1a506 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/utils.py:20 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcd1c3acf0c02c6c — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/utils.py:32 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f67ae4fbf6a8c89b — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/utils.py:157 
    with open(hostfile_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e77227bc89ec504 — Filesystem access.
pkgs/python/[email protected]/deepspeed/autotuning/utils.py:409 
        with open(exp_path, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ff48fcb7d70c157 — Filesystem access.
pkgs/python/[email protected]/deepspeed/checkpoint/ds_to_universal.py:607 
    with open(latest_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9396647b9d95def5 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:151 
    rank = int(os.getenv('RANK', '-1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2098c78fa4dcfe4 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:152 
    size = int(os.getenv('WORLD_SIZE', '-1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90258dc6b2dbdc75 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:834 
        if auto_mpi_discovery and not all(map(lambda v: v in os.environ, required_env)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e486f7b93a2d303 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:845 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b89b1301e1dbed8 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:851 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cec93481a31f8dbb — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:884 
    os.environ['RANK'] = str(rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a40cc160d8b3dfb — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:885 
    os.environ['WORLD_SIZE'] = str(world_size)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af8d8046d9a9b3eb — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:886 
    os.environ['LOCAL_RANK'] = str(local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e4f7e61939c5833 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:887 
    os.environ['MASTER_ADDR'] = master_addr

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f932bea96f83ce86 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:888 
    os.environ['MASTER_PORT'] = str(distributed_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c15b8d5b210619d — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:893 
            format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d68d9d334511e052 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:894 
                   os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e871a054566b960f — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:904 
    return 'AZUREML_EXPERIMENT_ID' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5f6c7cbe0248a84 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:909 
    return 'SM_TRAINING_ENV' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfffc07e42453e0d — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:914 
    return 'DLTS_JOB_ID' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cd3bc1c5f44b787 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:922 
    os.environ["RANK"] = os.environ["OMPI_COMM_WORLD_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a5adb8c980cc123 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:923 
    os.environ["WORLD_SIZE"] = os.environ["OMPI_COMM_WORLD_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d53c7963bb71541e — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:924 
    single_node = int(os.environ["OMPI_COMM_WORLD_LOCAL_SIZE"]) == int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b22a7b0e0c6699e — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:927 
        master_node_params = os.environ["AZ_BATCH_MASTER_NODE"].split(":")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5780fe8c44972d6f — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:928 
        os.environ["MASTER_ADDR"] = master_node_params[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eaaaa52b9cec6f18 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:930 
        if "MASTER_PORT" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf2e551fb07de4d3 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:931 
            os.environ["MASTER_PORT"] = str(master_port)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99011d278eba9ff4 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:933 
        os.environ["MASTER_ADDR"] = os.environ["AZ_BATCHAI_MPI_MASTER_NODE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85899b93d289798b — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:934 
        os.environ["MASTER_PORT"] = DEFAULT_AML_MASTER_PORT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a7a86f53dc71725 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:937 
        utils.logger.info("NCCL_SOCKET_IFNAME original value = {}".format(os.environ["NCCL_SOCKET_IFNAME"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4ebfe69788c151b — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:939 
    os.environ["NCCL_SOCKET_IFNAME"] = DEFAULT_AML_NCCL_SOCKET_IFNAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6401e3f46fc9dbf — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:940 
    os.environ['LOCAL_RANK'] = os.environ["OMPI_COMM_WORLD_LOCAL_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d503df8cf7f077e7 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:945 
            .format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c133ba570a3473e — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:946 
                    os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c993b2504d515764 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:952 
    os.environ["RANK"] = os.environ["OMPI_COMM_WORLD_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d341fce04c1e809 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:953 
    os.environ['LOCAL_RANK'] = os.environ["OMPI_COMM_WORLD_LOCAL_RANK"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7f23cefdcc3ad33 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:954 
    os.environ["WORLD_SIZE"] = os.environ["OMPI_COMM_WORLD_SIZE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2500670896229475 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:959 
            .format(os.environ['RANK'], os.environ['LOCAL_RANK'], os.environ['WORLD_SIZE'], os.environ['MASTER_ADDR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6cb2295416971025 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/comm.py:960 
                    os.environ['MASTER_PORT']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82ec365c583f29d1 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/mori.py:103 
    return os.environ.get("DS_SDMA_ALLGATHER", "0") in _TRUTHY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6f4f12906b0abac — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/mori.py:107 
    raw = os.environ.get("DS_SDMA_ALLGATHER_MAX_NUMEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60b89901be9c6863 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/mori.py:142 
    os.environ.setdefault("MORI_ENABLE_SDMA", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b8baa016533da83 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/torch.py:175 
                local_rank = int(os.environ.get('LOCAL_RANK', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6359e9dd1a1cb5f9 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/torch.py:211 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9addf9fbd9f8b181 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/torch.py:219 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edfccfc629cbea71 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/torch.py:232 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d064b369203ed30 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/torch.py:245 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01cba3aefcc5cd5a — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/torch.py:271 
            if int(os.getenv('RANK', '0')) == 0:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cd9bc9eba9e10b9 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/utils.py:14 
    rank = os.environ.get('LOCAL_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d838217c2ffcc1e — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/utils.py:17 
        rank = os.environ.get('OMPI_COMM_WORLD_LOCAL_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #258957f982f89cec — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/utils.py:29 
    rank = os.environ.get('RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c745e8530f5126cb — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/utils.py:32 
        rank = os.environ.get('OMPI_COMM_WORLD_RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fdd80f0a465397f — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/utils.py:43 
    size = os.environ.get('WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c88eb4102099307 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/utils.py:44 
    rank = os.environ.get('RANK')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1e91667ead5a759 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/comm/utils.py:47 
        size = os.environ.get('OMPI_COMM_WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a9aefb49f435a96 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/compile/profilers/comm_profile.py:157 
    local_rank = int(os.environ['LOCAL_RANK'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d85cca49ffa3f28 — Filesystem access.
pkgs/python/[email protected]/deepspeed/compile/util.py:348 
    with open(csv_filename, mode='w', newline='') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cea0a537501c62d3 — Filesystem access.
pkgs/python/[email protected]/deepspeed/compression/compress.py:24 
        return json.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cc55f99786de116 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/constants.py:19 
default_pg_timeout = timedelta(minutes=int(os.getenv("DEEPSPEED_TIMEOUT", default=30)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c0e70c82b6103dd — Environment-variable access.
pkgs/python/[email protected]/deepspeed/elasticity/elastic_agent.py:96 
                "NCCL_ASYNC_ERROR_HANDLING": os.getenv("NCCL_ASYNC_ERROR_HANDLING", str(1)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c11b4d2af5cc5ba — Environment-variable access.
pkgs/python/[email protected]/deepspeed/elasticity/elastic_agent.py:99 
            if "OMP_NUM_THREADS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccdcc1ac88fd6ff1 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/elasticity/elastic_agent.py:100 
                worker_env_ds["OMP_NUM_THREADS"] = os.environ["OMP_NUM_THREADS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f156631000e29127 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/elasticity/elasticity.py:212 
    if DEEPSPEED_ELASTICITY_CONFIG in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69e6825a8a6edd55 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/elasticity/elasticity.py:213 
        scheduler_elastic_config_dict = json.loads(os.environ[DEEPSPEED_ELASTICITY_CONFIG])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ddf5179a985642f — Environment-variable access.
pkgs/python/[email protected]/deepspeed/elasticity/elasticity.py:319 
            if "WORLD_SIZE" in os.environ and \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98dd5edcdd610618 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/elasticity/elasticity.py:320 
                os.getenv('WORLD_SIZE').isnumeric():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c979c672c855d49e — Environment-variable access.
pkgs/python/[email protected]/deepspeed/elasticity/elasticity.py:321 
                current_num_gpus = int(os.getenv('WORLD_SIZE'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84ef8c696fb1457e — Environment-variable access.
pkgs/python/[email protected]/deepspeed/elasticity/elasticity.py:323 
                WORLD_SIZE = os.getenv('WORLD_SIZE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a68dced27f06daa — Environment-variable access.
pkgs/python/[email protected]/deepspeed/env_report.py:78 
    if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #837556f87b807309 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/env_report.py:79 
        return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b74339506d354b74 — Filesystem access.
pkgs/python/[email protected]/deepspeed/env_report.py:95 
            with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3bc223e6f79c414 — Filesystem access.
pkgs/python/[email protected]/deepspeed/git_version_info.py:13 
        version = open('version.txt', 'r').read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b3e7bc9a07d2206 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/inference/engine.py:251 
            local_rank = int(os.getenv('LOCAL_RANK', '0'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7b01095e6c3653e — Filesystem access.
pkgs/python/[email protected]/deepspeed/inference/engine.py:421 
                    with open(latest_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #634dbc6d83114be1 — Filesystem access.
pkgs/python/[email protected]/deepspeed/inference/v2/checkpoint/huggingface_engine.py:91 
            param_map = json.load(open(model_param_json, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3980c10ad6de7342 — Filesystem access.
pkgs/python/[email protected]/deepspeed/inference/v2/engine_factory.py:54 
    metadata = json.load(open(metadata_filename, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b5869fe986b4446 — Filesystem access.
pkgs/python/[email protected]/deepspeed/inference/v2/engine_factory.py:64 
    model_config = pickle.load(open(os.path.join(path, "ds_model_config.pkl"), "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ac2e8e386f5facd — Environment-variable access.
pkgs/python/[email protected]/deepspeed/inference/v2/engine_v2.py:98 
        local_rank = int(os.getenv("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53316827092f5ab3 — Filesystem access.
pkgs/python/[email protected]/deepspeed/inference/v2/engine_v2.py:265 
        json.dump(self._model.flattened_param_metadata.json(), open(metadata_file_name, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3700c16bb1f94869 — Filesystem access.
pkgs/python/[email protected]/deepspeed/inference/v2/engine_v2.py:268 
            pickle.dump(self._model._config, open(os.path.join(save_path, "ds_model_config.pkl"), "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2622d844e94f17ad — Filesystem access.
pkgs/python/[email protected]/deepspeed/inference/v2/model_implementations/inference_policy_base.py:209 
            metadata = json.load(open(metadata_path, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #524924096ceb6b43 — Filesystem access.
pkgs/python/[email protected]/deepspeed/io/fast_file_writer.py:166 
        fp = open(self._file_path, 'ab')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ada66c869ce115c — Filesystem access.
pkgs/python/[email protected]/deepspeed/io/mock_file_writer.py:15 
        self._fp = open(file_path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b4000efdf1b2047 — Filesystem access.
pkgs/python/[email protected]/deepspeed/io/py_file_writer.py:15 
        self._fp = open(file_path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac268d522239f254 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/launcher/launch.py:147 
    current_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc635e3091b26822 — Filesystem access.
pkgs/python/[email protected]/deepspeed/launcher/launch.py:202 
        with open(pid_file, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9cf02a269a6d107f — Filesystem access.
pkgs/python/[email protected]/deepspeed/launcher/launch.py:212 
        with open(DLTS_POD_ENV_PATH) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04dd9aeae6612fec — Filesystem access.
pkgs/python/[email protected]/deepspeed/launcher/launch.py:267 
                log_fd = open(log_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30ed967ee0219ff1 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/launcher/launch.py:304 
        run_id = os.environ.get("ELASTIC_RUN_ID", ELASTIC_TRAINING_ID_DEFAULT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a47bf1613ad843c2 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/launcher/launcher_helper.py:84 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #578a9e6e3df73e7a — Filesystem access.
pkgs/python/[email protected]/deepspeed/launcher/multinode_runner.py:453 
        with open(MVAPICH_TMP_HOSTFILE, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f690e47f509d65d — Environment-variable access.
pkgs/python/[email protected]/deepspeed/launcher/runner.py:39 
DEEPSPEED_ENVIRONMENT_NAME = os.getenv("DS_ENV_FILE", ".deepspeed_env")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e620706a106b3724 — Filesystem access.
pkgs/python/[email protected]/deepspeed/launcher/runner.py:237 
    with open(hostfile_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88e7bad7a308dbb2 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/launcher/runner.py:450 
    visible_devices = os.environ.get(visible_devices_env, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8635f42886b3774 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/launcher/runner.py:460 
        del os.environ[visible_devices_env]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f16f8147e1d78aae — Environment-variable access.
pkgs/python/[email protected]/deepspeed/launcher/runner.py:480 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76e85ad1a80a4fb1 — Filesystem access.
pkgs/python/[email protected]/deepspeed/launcher/runner.py:620 
                with open(environ_file, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afbaa1b0c2edf367 — Filesystem access.
pkgs/python/[email protected]/deepspeed/module_inject/replace_module.py:542 
            with open(f"{config.save_mp_checkpoint_path}/ds_inference_config.json", "w") as cfg:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe7083d9ca21abd7 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/monitor/csv_monitor.py:28 
                if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6961a62d2f7f43a2 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/monitor/csv_monitor.py:29 
                    infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3d65182dd92e03b — Environment-variable access.
pkgs/python/[email protected]/deepspeed/monitor/csv_monitor.py:30 
                elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19ef75470734a771 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/monitor/csv_monitor.py:31 
                    infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b69b74af54c807d — Filesystem access.
pkgs/python/[email protected]/deepspeed/monitor/csv_monitor.py:62 
                with open(fname, 'a+') as csv_monitor_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #517e6e23a93cc588 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/monitor/tensorboard.py:34 
                if "DLWS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e8c5db2c5431754 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/monitor/tensorboard.py:35 
                    infra_job_id = os.environ["DLWS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef6dfa4934d150d6 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/monitor/tensorboard.py:36 
                elif "DLTS_JOB_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62d9b4f53fa2a7c3 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/monitor/tensorboard.py:37 
                    infra_job_id = os.environ["DLTS_JOB_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #278a95ac4291ff94 — Filesystem access.
pkgs/python/[email protected]/deepspeed/nvme/ds_aio_job.py:34 
            self.output_fd = open(self.output_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e872e3d42c3bc15 — Filesystem access.
pkgs/python/[email protected]/deepspeed/nvme/parse_nvme_stats.py:90 
    with open(file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad843f1b4d7155db — Filesystem access.
pkgs/python/[email protected]/deepspeed/nvme/perf_run_sweep.py:130 
    with open(sweep_config_json) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #316e7755ade841b3 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:102 
        elif os.getenv("DS_SKIP_CUDA_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a24e6ff1fbb30bc0 — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:231 
                with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4192d1f5af7dbc1 — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:242 
                    with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6244c18e8218fcac — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:347 
            with open(filename, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cab66c5a58426b02 — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:352 
                filestderr = open(os.path.join(tempdir, 'stderr.txt'), 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6cc7f3adae8831b7 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:363 
            cflags = shlex.split(os.environ.get('CFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a915c765d684132f — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:368 
            ldflags = shlex.split(os.environ.get('LDFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f5afe3b19d06d9c — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:561 
        torch_arch_list_present = "TORCH_CUDA_ARCH_LIST" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be31baa060cf25d9 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:562 
        torch_arch_list = os.environ.get("TORCH_CUDA_ARCH_LIST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d957bc719ea79a0 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:587 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f08b51016a9a82a2 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:608 
                os.environ["TORCH_CUDA_ARCH_LIST"] = torch_arch_list

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e8b3ad00861c116 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:610 
                os.environ.pop("TORCH_CUDA_ARCH_LIST", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbe1a3f955f5024e — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:650 
                arch_string = os.environ.get('TORCH_CUDA_ARCH_LIST', '').strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84c7690d8fa9a99c — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:675 
            cross_compile_archs_env = os.environ.get('TORCH_CUDA_ARCH_LIST', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbe296316c4785d3 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:719 
        os.environ["TORCH_CUDA_ARCH_LIST"] = ";".join(arch_tokens)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba83b750911c5666 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:788 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d70317a860193de4 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:845 
                nvcc_threads = int(os.getenv("DS_NVCC_THREADS", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81f344cff0b66eee — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/builder.py:864 
            if os.environ.get('DS_DEBUG_CUDA_BUILD', '0') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2ad7b04f30ac390 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/cpu/comm.py:37 
        ccl_root_path = os.environ.get("CCL_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b7936fc27986c88 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/evoformer_attn.py:22 
        self.cutlass_path = os.environ.get("CUTLASS_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #147be89483b439a5 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/evoformer_attn.py:39 
        if os.environ.get("DS_EVOFORMER_GPU_ARCH"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8d6fd71b545d15b — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/evoformer_attn.py:78 
                with open(changelog_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdd9203622adfd11 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/evoformer_attn.py:86 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f39986a81d96abf — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/evoformer_attn.py:121 
            value = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #021d3c1b29be135e — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/fp_quantizer.py:35 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00ca87dceb909e28 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/inference_core_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7def3b923aa13b0c — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/inference_cutlass_builder.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec5354f0b61cffda — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/npu/builder.py:42 
        if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58dffb4d3255ac03 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/npu/builder.py:43 
            return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50a25be831b800f5 — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/npu/builder.py:56 
                with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f021be1f8402579 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/ragged_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70dbcd3d25d5bdc1 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/ragged_utils.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a20f09c7b6909956 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/spatial_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8243f22b9be225cc — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/transformer_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f350fdf43460d7e — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/xpu/builder.py:89 
        if os.environ.get('USE_MKL_GEMM'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83068c19dcaed5a1 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/xpu/builder.py:152 
            saved_env[var] = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #250058cbcb4730c6 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/xpu/builder.py:153 
        os.environ['CXX'] = 'icpx'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7c5fb3b8671b4ff — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/xpu/builder.py:159 
            lib_path = os.environ.get('LIBRARY_PATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #036d818f474e0df0 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/xpu/builder.py:160 
            os.environ['LIBRARY_PATH'] = f'{sycl_lib}:{lib_path}' if lib_path else sycl_lib

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1855b4c1e0098921 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/xpu/builder.py:162 
            cpath = os.environ.get('CPATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abff1093961ade56 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/xpu/builder.py:163 
            os.environ['CPATH'] = f'{sycl_inc}:{cpath}' if cpath else sycl_inc

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #487197db07eacb40 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/xpu/builder.py:176 
                    os.environ.pop(var, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d2618c9d4409264 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/op_builder/xpu/builder.py:178 
                    os.environ[var] = val

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16abdf14dd72f949 — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/sparse_attention/trsrc/__init__.py:36 
    with open(fname, 'r') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3982fe3a7bcabd5d — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/transformer/inference/config.py:131 
        with open(json_file, "r", encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #404ac06bb508466e — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/transformer/inference/moe_inference.py:104 
        with open(json_file, "r", encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ee6a35e4878f618 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/transformer/inference/triton/matmul_ext.py:64 
        tt_home = os.environ.get('TRITON_HOME') or os.path.join(Path.home(), ".triton")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53813bccef188bc9 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/ops/transformer/inference/triton/matmul_ext.py:98 
        self.cache_dir = os.environ.get('TRITON_CACHE_DIR', TritonCacheDir.default_cache_dir())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87af41eeea605d6f — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/transformer/inference/triton/matmul_ext.py:112 
                with open(self.file_path + ".tmp", 'wb') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aea05ae591aae66b — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/transformer/inference/triton/matmul_ext.py:118 
            with open(self.file_path, 'rb') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f67223991d6a602 — Filesystem access.
pkgs/python/[email protected]/deepspeed/ops/transformer/transformer.py:138 
        with open(json_file, "r", encoding='utf-16') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6aff8174ed478250 — Filesystem access.
pkgs/python/[email protected]/deepspeed/profiling/flops_profiler/profiler.py:307 
            f = open(output_file, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f13719f9471cce4 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/config.py:653 
        self.data = json.load(open(filename, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #232446f1e1dfc211 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/config.py:656 
        with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c7b1037c40a9dd1 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/config.py:667 
            self._param_dict = hjson.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b4782f14efa548e — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:122 
                        with open(f"{metric_fname}_{m_value}.csv", 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4f2b5acd6fc5c1c — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:142 
                        with open(f"{metric_fname}_{m_value}.csv", 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c978b6aba92d958d — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:271 
                        with open(w_metric_to_sample_fname, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e74fb3d36f941f01 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:828 
        worker_id=int(os.environ['RANK']),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db1ac846fc99c3de — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:829 
        num_workers=int(os.environ['WORLD_SIZE']),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ebba7eb4fb4c8fd — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:838 
        device=f"cuda:{int(os.environ['LOCAL_RANK'])}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea448dfb4760e434 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:865 
            with open(os.path.join(da.save_path, path), 'rb') as f1, \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6e3981700eabe87 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/data_analyzer.py:866 
                open(os.path.join(dda.save_path, path), 'rb') as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c444a6b18291bd1 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:46 
        with open(index_file_path(path), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f3421a45fa89a41 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:150 
        with open(index_file_path(path), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d9f66b67d15bc30 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:166 
        self.data_file = open(data_file_path(path), 'rb', buffering=0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d04db4d2e1ef912c — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:275 
        self.out_file = open(out_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2d58241564e256b — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:308 
        with open(data_file_path(another_file), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97803d88daff187e — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:318 
        index = open(index_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca04bc475338f217 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:332 
    with open(path, 'rb') as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58eac4d9e57c0460 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:380 
                    self._file = open(path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45125401514572fe — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:422 
            with open(path, 'rb') as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59a1683ca6c293a6 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:578 
        self._data_file = open(out_file, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b76e87fa1e888ca4 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/data_pipeline/data_sampling/indexed_dataset.py:618 
        with open(data_file_path(another_file), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41bca2a66732f7af — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/engine.py:1461 
        if "OMPI_COMM_WORLD_LOCAL_RANK" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68100517992d0232 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/engine.py:1462 
            ompi_local_rank = os.environ.get("OMPI_COMM_WORLD_LOCAL_RANK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0071bf44568d7103 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/engine.py:1463 
            local_rank = os.environ.get('LOCAL_RANK', ompi_local_rank)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e628f4ff0e109dd — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/engine.py:1466 
            os.environ['LOCAL_RANK'] = local_rank

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82bf947abb409a82 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/engine.py:1468 
        self.local_rank = int(os.environ['LOCAL_RANK'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b2c7c9da19e3052 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/engine.py:1474 
        assert "LOCAL_RANK" in os.environ or "OMPI_COMM_WORLD_LOCAL_RANK" in os.environ, "DeepSpeed requires the LOCAL_RANK environment " \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e9b0451d41e07f1 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/engine.py:1482 
                env_local_rank = int(os.environ.get("LOCAL_RANK"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd9e5e79e7ee2f7a — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/engine.py:3769 
                with open(latest_path, "r") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ba10cbb039f5ca6 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/engine.py:4177 
                with open(os.path.join(save_dir, 'latest'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a25ecf36a06ca740 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/engine.py:4195 
            with open(os.path.join(commit_info.save_dir, 'latest'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db6f6ea955111afc — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/model_checkpointing/utils.py:71 
                                 local_rank=int(os.environ[LOCAL_RANK]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0ff70ef5908fb7b — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/model_checkpointing/utils.py:76 
                                 num_machines=int(os.environ[CROSS_SIZE]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80ef87f2ccca3f7b — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/model_checkpointing/utils.py:77 
                                 machine_rank=int(os.environ[CROSS_RANK]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c765eaf500cebc9d — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/model_checkpointing/utils.py:78 
                                 num_sockets=int(os.environ[CROSS_SIZE]) * SOCKETS_PER_MACHINE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3d42d1c83c7bc98 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/pipe/module.py:166 
        self.local_rank = int(os.environ.get("LOCAL_RANK", None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d776948a397bb215 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/state_dict_factory.py:26 
            with open(json_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a371d860398a5f25 — Filesystem access.
pkgs/python/[email protected]/deepspeed/runtime/tensor_parallel/init_utils.py:24 
            return hjson.load(open(config, "r"), object_pairs_hook=dict_raise_error_on_duplicate_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a48fcc57808224ca — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/zenflow/zenflow_utils.py:65 
    os.environ['OMP_NUM_THREADS'] = str(len(zf_affinity))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #302d7b9c401c3b82 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/zenflow/zenflow_utils.py:186 
    os.environ['OMP_NUM_THREADS'] = str(len(pt_affinity))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0accd3be75de5d30 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/zero/mics_utils.py:62 
    ndevices_per_node = int(os.environ.get("NDEV_PER_NODE", get_accelerator().device_count()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a967290e4a92cd23 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/zero/partition_parameters.py:1059 
        self.local_device = torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d3fb25df9cd279a — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/zero/utils.py:77 
        device=torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"])),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e266ce906472a737 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/runtime/zero/utils.py:97 
        device=torch.device(get_accelerator().device_name(os.environ["LOCAL_RANK"])),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9fe6bab961ecb1a — Filesystem access.
pkgs/python/[email protected]/deepspeed/utils/debug.py:112 
    with open(__file__, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da8af54cda97b7b0 — Filesystem access.
pkgs/python/[email protected]/deepspeed/utils/debug.py:149 
        fh = open(f"log_rank_{rank}.txt", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5e6c908759d09e8 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/utils/logging.py:49 
        if required_torch_version(min_version=2.6) and os.getenv("DISABLE_LOGS_WHILE_COMPILING", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1f175f549c50f01 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/utils/logging.py:52 
                for item in os.getenv("LOGGER_METHODS_TO_EXCLUDE_FROM_DISABLE", "").split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2408ad8343250ef0 — Filesystem access.
pkgs/python/[email protected]/deepspeed/utils/logging.py:178 
        with open(path, 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e7e9fc53ede8ca6 — Environment-variable access.
pkgs/python/[email protected]/deepspeed/utils/numa.py:107 
    if 'KMP_AFFINITY' in os.environ.keys():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b35aa31333898670 — Filesystem access.
pkgs/python/[email protected]/deepspeed/utils/zero_to_fp32.py:581 
            with open(latest_path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8992a13557e455ae — Filesystem access.
pkgs/python/[email protected]/deepspeed/utils/zero_to_fp32.py:678 
        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c26ed4411d558f3f — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:102 
        elif os.getenv("DS_SKIP_CUDA_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42af7b5c842f2f7e — Filesystem access.
pkgs/python/[email protected]/op_builder/builder.py:231 
                with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b9194bc3e927a6a — Filesystem access.
pkgs/python/[email protected]/op_builder/builder.py:242 
                    with open(rocm_ver_file, 'r') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12847e1a25178a52 — Filesystem access.
pkgs/python/[email protected]/op_builder/builder.py:347 
            with open(filename, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #085c85e1733d2fec — Filesystem access.
pkgs/python/[email protected]/op_builder/builder.py:352 
                filestderr = open(os.path.join(tempdir, 'stderr.txt'), 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #553122e446664fca — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:363 
            cflags = shlex.split(os.environ.get('CFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #156a84be10512974 — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:368 
            ldflags = shlex.split(os.environ.get('LDFLAGS', ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d32e6bb9748ca7c — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:561 
        torch_arch_list_present = "TORCH_CUDA_ARCH_LIST" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c586536e258f0ef — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:562 
        torch_arch_list = os.environ.get("TORCH_CUDA_ARCH_LIST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d7fac392b1f1abd — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:587 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a44f1499c8e4918 — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:608 
                os.environ["TORCH_CUDA_ARCH_LIST"] = torch_arch_list

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0d4155b96187faa — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:610 
                os.environ.pop("TORCH_CUDA_ARCH_LIST", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb55ac60a4b81393 — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:650 
                arch_string = os.environ.get('TORCH_CUDA_ARCH_LIST', '').strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c74c9b4e20de36c — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:675 
            cross_compile_archs_env = os.environ.get('TORCH_CUDA_ARCH_LIST', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00736ea5bc5c5ba9 — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:719 
        os.environ["TORCH_CUDA_ARCH_LIST"] = ";".join(arch_tokens)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #535c2fc9fc780368 — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:788 
                os.environ["PYTORCH_ROCM_ARCH"] = self.get_rocm_gpu_arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18839e143253d9d8 — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:845 
                nvcc_threads = int(os.getenv("DS_NVCC_THREADS", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d95523841d2c291 — Environment-variable access.
pkgs/python/[email protected]/op_builder/builder.py:864 
            if os.environ.get('DS_DEBUG_CUDA_BUILD', '0') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bd0f8ec57c48adf — Environment-variable access.
pkgs/python/[email protected]/op_builder/cpu/comm.py:37 
        ccl_root_path = os.environ.get("CCL_ROOT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3b5deb5a5adb190 — Environment-variable access.
pkgs/python/[email protected]/op_builder/evoformer_attn.py:22 
        self.cutlass_path = os.environ.get("CUTLASS_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db73fc57403acd78 — Environment-variable access.
pkgs/python/[email protected]/op_builder/evoformer_attn.py:39 
        if os.environ.get("DS_EVOFORMER_GPU_ARCH"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea2358c03f991a7e — Filesystem access.
pkgs/python/[email protected]/op_builder/evoformer_attn.py:78 
                with open(changelog_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41d9c6891656d1c6 — Environment-variable access.
pkgs/python/[email protected]/op_builder/evoformer_attn.py:86 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ba34449497e0886 — Environment-variable access.
pkgs/python/[email protected]/op_builder/evoformer_attn.py:121 
            value = os.environ.get(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a71eb60268ca695 — Environment-variable access.
pkgs/python/[email protected]/op_builder/fp_quantizer.py:35 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96cc09ead1cd51c4 — Environment-variable access.
pkgs/python/[email protected]/op_builder/inference_core_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2080fd77b2b8d303 — Environment-variable access.
pkgs/python/[email protected]/op_builder/inference_cutlass_builder.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50ec1aad497fcd1e — Environment-variable access.
pkgs/python/[email protected]/op_builder/npu/builder.py:42 
        if "ASCEND_HOME_PATH" in os.environ or os.path.exists(os.environ["ASCEND_HOME_PATH"]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a8b2bcf90085c3f — Environment-variable access.
pkgs/python/[email protected]/op_builder/npu/builder.py:43 
            return os.environ["ASCEND_HOME_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c75d06777da463e8 — Filesystem access.
pkgs/python/[email protected]/op_builder/npu/builder.py:56 
                with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38327f778440b736 — Environment-variable access.
pkgs/python/[email protected]/op_builder/ragged_ops.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4d0c33802bdbc84 — Environment-variable access.
pkgs/python/[email protected]/op_builder/ragged_utils.py:31 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5c74543c28f78e9 — Environment-variable access.
pkgs/python/[email protected]/op_builder/spatial_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47746f70b7e5c8cb — Environment-variable access.
pkgs/python/[email protected]/op_builder/transformer_inference.py:30 
        if not os.environ.get("DS_IGNORE_CUDA_DETECTION"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46457eb12a4b9352 — Environment-variable access.
pkgs/python/[email protected]/op_builder/xpu/builder.py:89 
        if os.environ.get('USE_MKL_GEMM'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8347578698be80b5 — Environment-variable access.
pkgs/python/[email protected]/op_builder/xpu/builder.py:152 
            saved_env[var] = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebc65b0c7e33e098 — Environment-variable access.
pkgs/python/[email protected]/op_builder/xpu/builder.py:153 
        os.environ['CXX'] = 'icpx'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #489b9f26e794bceb — Environment-variable access.
pkgs/python/[email protected]/op_builder/xpu/builder.py:159 
            lib_path = os.environ.get('LIBRARY_PATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe36ca05410ef195 — Environment-variable access.
pkgs/python/[email protected]/op_builder/xpu/builder.py:160 
            os.environ['LIBRARY_PATH'] = f'{sycl_lib}:{lib_path}' if lib_path else sycl_lib

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #605d837e21541c60 — Environment-variable access.
pkgs/python/[email protected]/op_builder/xpu/builder.py:162 
            cpath = os.environ.get('CPATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #773e23fa3f8efe22 — Environment-variable access.
pkgs/python/[email protected]/op_builder/xpu/builder.py:163 
            os.environ['CPATH'] = f'{sycl_inc}:{cpath}' if cpath else sycl_inc

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ec8b1491f2abf4a — Environment-variable access.
pkgs/python/[email protected]/op_builder/xpu/builder.py:176 
                    os.environ.pop(var, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #748ddfb15ce769a1 — Environment-variable access.
pkgs/python/[email protected]/op_builder/xpu/builder.py:178 
                    os.environ[var] = val

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04d4121b84ea8b38 — Filesystem access.
pkgs/python/[email protected]/setup.py:61 
    with open(path, 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #737776bb1600c195 — Environment-variable access.
pkgs/python/[email protected]/setup.py:69 
    return bool(os.environ.get(key, None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0748763f0dd90445 — Environment-variable access.
pkgs/python/[email protected]/setup.py:78 
    return os.environ.get(key, None) or default

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a64fc8ef02d0709 — Environment-variable access.
pkgs/python/[email protected]/setup.py:147 
        os.environ["TORCH_CUDA_ARCH_LIST"] = get_default_compute_capabilities()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a867b0907d74666 — Filesystem access.
pkgs/python/[email protected]/setup.py:238 
version_str = open('version.txt', 'r').read().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3474655332a0f03f — Filesystem access.
pkgs/python/[email protected]/setup.py:246 
    with open('build.txt', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #536912d38d490f52 — Environment-variable access.
pkgs/python/[email protected]/setup.py:247 
        fd.write(os.environ['DS_BUILD_STRING'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d4e653e9ce1e4bd — Environment-variable access.
pkgs/python/[email protected]/setup.py:248 
    version_str += os.environ['DS_BUILD_STRING']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2c401a776bf20c8 — Filesystem access.
pkgs/python/[email protected]/setup.py:251 
    with open('build.txt', 'r') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0670cae88eb3eca — Filesystem access.
pkgs/python/[email protected]/setup.py:285 
with open('deepspeed/git_version_info_installed.py', 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f24663344c5d684e — Filesystem access.
pkgs/python/[email protected]/setup.py:298 
with open(os.path.join(thisdir, 'README.md'), encoding='utf-8') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fastapi

python dependency
expand_more 64 low-confidence finding(s)
low env_fs dependency Excluded from app score #05b60c6559324044 — Filesystem access.
pkgs/python/[email protected]/docs_src/background_tasks/tutorial001_py310.py:7 
    with open("log.txt", mode="w") as email_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a40beb891ecd2437 — Filesystem access.
pkgs/python/[email protected]/docs_src/background_tasks/tutorial002_an_py310.py:9 
    with open("log.txt", mode="a") as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #393ebc78b817e33f — Filesystem access.
pkgs/python/[email protected]/docs_src/background_tasks/tutorial002_py310.py:7 
    with open("log.txt", mode="a") as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55fc95613bdd817c — Filesystem access.
pkgs/python/[email protected]/docs_src/custom_response/tutorial008_py310.py:11 
        with open(some_file_path, mode="rb") as file_like:  # (2)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbb4c045154f7d52 — Filesystem access.
pkgs/python/[email protected]/docs_src/events/tutorial002_py310.py:8 
    with open("log.txt", mode="a") as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #172498ff02a19c1f — Filesystem access.
pkgs/python/[email protected]/docs_src/generate_clients/tutorial004_py310.py:5 
openapi_content = json.loads(file_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #379fdbf27f4b7078 — Filesystem access.
pkgs/python/[email protected]/docs_src/generate_clients/tutorial004_py310.py:15 
file_path.write_text(json.dumps(openapi_content))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #1c280bcfa0ccb7b6 — Filesystem access.
pkgs/python/[email protected]/scripts/add_latest_release_date.py:12 
    with open(RELEASE_NOTES_FILE) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #97d10e6f396d3c55 — Filesystem access.
pkgs/python/[email protected]/scripts/add_latest_release_date.py:31 
        with open(RELEASE_NOTES_FILE, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling reachable #5b8f9454afecc0c6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/scripts/contributors.py:129 
    response = httpx.post(
        github_graphql_url,
        headers=headers,
        timeout=settings.httpx_timeout,
        json={"query": query, "variables": variables, "operationName": "Q"},
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling reachable #a0b3f76f3ac0a224 — Filesystem access.
pkgs/python/[email protected]/scripts/contributors.py:227 
    old_content = content_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #9152bd252432d730 — Filesystem access.
pkgs/python/[email protected]/scripts/contributors.py:233 
    content_path.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0e7e2eed32d2e420 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:105 
    return yaml.unsafe_load(en_config_path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #07cb3b21463f9427 — Environment-variable access.
pkgs/python/[email protected]/scripts/docs.py:129 
    os.environ["DYLD_FALLBACK_LIBRARY_PATH"] = "/opt/homebrew/lib"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #e09b18e54d567dab — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:143 
    new_llm_prompt_path.write_text("", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #49f3ab78f8433fab — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:223 
    missing_translation = (docs_path / "missing-translation.md").read_text(
        encoding="utf-8"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #191d5fff89a7f126 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:229 
    translation_banner = translation_banner_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #2c631d1137d4bc10 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:236 
                markdown = translated_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #6510fd68ec96ea99 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:238 
                    staged_file.write_text(markdown, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #5363458450ec59a2 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:242 
                staged_file.write_text(
                    add_markdown_notice(markdown, banner), encoding="utf-8"
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #4d2da3a2a78121c6 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:246 
                markdown = staged_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #492b6d3d738e0e2a — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:247 
                staged_file.write_text(
                    add_markdown_notice(markdown, missing_translation),
                    encoding="utf-8",
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #5e711e29416b04ef — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:277 
    config_path.write_text(
        yaml.dump(config, sort_keys=False, width=200, allow_unicode=True),
        encoding="utf-8",
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #d60fcb6caadeb97d — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:295 
    config = yaml.unsafe_load(config_path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #faf1436a18a2216d — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:349 
    content = en_index.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #656bdd4f81747684 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:355 
    sponsors = yaml.safe_load(sponsors_data_path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #c4b22ec47e257747 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:384 
    old_content = readme_path.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #caa5cfed7a96b746 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:389 
        readme_path.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #7cc0851ea20f8827 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:430 
        en_config_path.write_text(
            yaml.dump(updated_config, sort_keys=False, width=200, allow_unicode=True),
            encoding="utf-8",
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #2150131cb87ddc71 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:488 
        language_names_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0c6c5495897178ed — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:542 
    sponsors = yaml.safe_load(sponsors_path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #17259dd7fea55fd1 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:553 
    old_content = partial_path.read_text("utf-8") if partial_path.is_file() else ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #744a5434c2349455 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:558 
        partial_path.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #19058856e30ffdb4 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:609 
    base_content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0c46e4274c4ad272 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:657 
        version_file.write_text(content_format, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #15a7caa30d2e07d2 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:713 
        content = md_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0680f28d959981c3 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:720 
            md_file.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #b94674487be4ead1 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:735 
        all_docs_content += md_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling reachable #bb06d7025fa070ff — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/scripts/notify_translations.py:218 
    response = httpx.post(
        github_graphql_url,
        headers=headers,
        timeout=settings.httpx_timeout,
        json={"query": query, "variables": variables, "operationName": "Q"},
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling reachable #10486eeb639ab55d — Filesystem access.
pkgs/python/[email protected]/scripts/notify_translations.py:319 
    contents = settings.github_event_path.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling reachable #5260abe070788b18 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/scripts/people.py:202 
    response = httpx.post(
        github_graphql_url,
        headers=headers,
        timeout=settings.httpx_timeout,
        json={"query": query, "variables": variables, "operationName": "Q"},
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling reachable #ce84a5e5a1baea29 — Filesystem access.
pkgs/python/[email protected]/scripts/people.py:384 
    old_content = content_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #95e2d9618d35a93e — Filesystem access.
pkgs/python/[email protected]/scripts/people.py:390 
    content_path.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #923652e94329ad18 — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:146 
    version_file_content = version_file.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #3b2fae2184a11f5a — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:147 
    release_notes_content = release_notes_file.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0fab3240a76a2ce6 — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:152 
    version_file.write_text(
        update_version_file(version_file_content, version, version_file)
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #b20b778770b39626 — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:155 
    release_notes_file.write_text(
        update_release_notes(
            release_notes_content, version, parsed_release_date, release_notes_file
        )
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #431190c9449d8119 — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:178 
    typer.echo(get_current_version(version_file.read_text(), version_file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #b6c6791ed9921efc — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:206 
    version = get_current_version(version_file.read_text(), version_file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #36613cf61836fa7c — Filesystem access.
pkgs/python/[email protected]/scripts/prepare_release.py:209 
            release_notes_file.read_text(), version, release_notes_file

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling reachable #f078801cb1ec71dd — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/scripts/sponsors.py:100 
    response = httpx.post(
        github_graphql_url,
        headers=headers,
        timeout=settings.httpx_timeout,
        json={"query": query, "variables": variables, "operationName": "Q"},
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling reachable #3acb5cb4f0f08c5a — Filesystem access.
pkgs/python/[email protected]/scripts/sponsors.py:148 
    old_content = content_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #d67c171b66e908b9 — Filesystem access.
pkgs/python/[email protected]/scripts/sponsors.py:154 
    content_path.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #f1c3361b2b5b5681 — Filesystem access.
pkgs/python/[email protected]/scripts/topic_repos.py:52 
    repos_old_content = repos_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #3af0c2c9bb5687a5 — Filesystem access.
pkgs/python/[email protected]/scripts/topic_repos.py:57 
    repos_path.write_text(new_repos_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #6991b6a1ab6a6fd0 — Filesystem access.
pkgs/python/[email protected]/scripts/translate.py:31 
general_prompt = general_prompt_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #3b12d492589d346c — Filesystem access.
pkgs/python/[email protected]/scripts/translate.py:38 
    return yaml.safe_load(Path("docs/language_names.yml").read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #801389def518b4a6 — Filesystem access.
pkgs/python/[email protected]/scripts/translate.py:121 
    lang_prompt_content = lang_prompt_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #fd88ea7a80523a94 — Filesystem access.
pkgs/python/[email protected]/scripts/translate.py:129 
    original_content = en_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #5f5fb63f6d221c68 — Filesystem access.
pkgs/python/[email protected]/scripts/translate.py:133 
        old_translation = out_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #709bd87258195daf — Filesystem access.
pkgs/python/[email protected]/scripts/translate.py:178 
    out_path.write_text(out_content, encoding="utf-8", newline="\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #bf7f8e28b4f15f72 — Filesystem access.
pkgs/python/[email protected]/scripts/translation_fixer.py:81 
        doc_lines = path.read_text(encoding="utf-8").splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #2cfe306fba009e44 — Filesystem access.
pkgs/python/[email protected]/scripts/translation_fixer.py:82 
        en_doc_lines = en_doc_path.read_text(encoding="utf-8").splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #7230aa0bc59ebd81 — Filesystem access.
pkgs/python/[email protected]/scripts/translation_fixer.py:94 
        path.write_text("\n".join(doc_lines), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

hf-doc-builder

python dependency
expand_more 30 low-confidence finding(s)
low env_fs dependency Excluded from app score #f7b89a17f2230985 — Filesystem access.
pkgs/python/[email protected]/setup.py:28 
    long_description=open("README.md", "r", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20c57ee701c4fab4 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/build_doc.py:193 
                with open(file, "r", encoding="utf-8-sig") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca98e55387a051de — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/build_doc.py:202 
                with open(dest_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e8e218e6d36af10 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/build_doc.py:210 
                with open(file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a706231f6751122 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/build_doc.py:219 
                with open(dest_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ec0a25c95713aa4 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/build_doc.py:265 
        with open(file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64f82406cd48b9cb — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/build_doc.py:268 
        with open(file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eefa463f5a1c9cf7 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/build_doc.py:294 
        with open(file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05c3cb822eef183c — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/build_doc.py:397 
    with open(toc_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1421a59a1b47261 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/build_doc.py:498 
    with open(Path(output_dir) / "objects.inv", "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d79657e46d7ebd46 — Environment-variable access.
pkgs/python/[email protected]/src/doc_builder/commands/build.py:163 
            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62fed3afd37add72 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/commands/convert_doc_file.py:68 
    with open(source_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63b5f2e1ae0b3be9 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/commands/convert_doc_file.py:77 
    with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4aab77f0a0a2142 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/commands/convert_doc_file.py:96 
    with open(source_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28ec305342e7207b — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/commands/convert_doc_file.py:107 
    with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c9d8204ec422968 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/commands/notebook_to_mdx.py:75 
        with open(dest_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6aab35020ba73954 — Environment-variable access.
pkgs/python/[email protected]/src/doc_builder/commands/preview.py:206 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ea548dc1c19d4fc — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/convert_md_to_mdx.py:163 
    with open(file, "r", encoding="utf-8-sig") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7202566d2afe1be4 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/convert_to_notebook.py:310 
    with open(file_name, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7aef9580f3de6e4 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/external.py:114 
            with open(tmp_file, "ab") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c49f02a099923d08 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/external.py:119 
            with open(tmp_file, "rb") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6e877c4ed8ecb17 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/style_doc.py:421 
    with open(code_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b53d2410902a4632 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/style_doc.py:429 
        with open(code_file, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a52dad0a2211c4f5 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/style_doc.py:448 
    with open(mdx_file, "r", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6de1e2a2cc948d0 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/style_doc.py:485 
        with open(mdx_file, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd5ffb91d9903977 — Environment-variable access.
pkgs/python/[email protected]/src/doc_builder/utils.py:28 
    os.getenv("HF_HOME", os.path.join(os.getenv("XDG_CACHE_HOME", "~/.cache"), "huggingface"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04b8cb1ade57071b — Environment-variable access.
pkgs/python/[email protected]/src/doc_builder/utils.py:31 
DOC_BUILDER_CACHE = os.getenv("DOC_BUILDER_CACHE", default_cache_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24f87af1349934b5 — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/utils.py:63 
    with open(os.path.join(build_path, "_versions.yml"), "r") as versions_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdb683c264576e7a — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/utils.py:83 
    with open(os.path.join(build_path, "_versions.yml"), "w") as versions_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25dff1b5c5a0b1ad — Filesystem access.
pkgs/python/[email protected]/src/doc_builder/utils.py:125 
    with open(os.path.join(path, "setup.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jinja2

python dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #af497e9ecf33de55 — Filesystem access.
pkgs/python/[email protected]/src/jinja2/bccache.py:270 
            f = open(filename, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d4ea524bd26f501 — Filesystem access.
pkgs/python/[email protected]/src/jinja2/environment.py:860 
                with open(os.path.join(target, filename), "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6eaf617d38cb3f1 — Filesystem access.
pkgs/python/[email protected]/src/jinja2/environment.py:1611 
            real_fp: t.IO[bytes] = open(fp, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d919e8acc1ee4d1d — Filesystem access.
pkgs/python/[email protected]/src/jinja2/loaders.py:214 
        with open(filename, encoding=self.encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7e3abf91a386f47 — Filesystem access.
pkgs/python/[email protected]/src/jinja2/loaders.py:382 
            with open(p, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6d583741a89d691 — Filesystem access.
pkgs/python/[email protected]/src/jinja2/utils.py:171 
    return open(filename, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

joblib

python dependency
expand_more 30 low-confidence finding(s)
low env_fs dependency Excluded from app score #b321ee8dc891ef49 — Environment-variable access.
pkgs/python/[email protected]/conftest.py:73 
    DEFAULT_BACKEND = os.environ.get("JOBLIB_TESTS_DEFAULT_PARALLEL_BACKEND", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c537310162ae2487 — Environment-variable access.
pkgs/python/[email protected]/conftest.py:110 
        os.environ.get(k) is None for k in ParallelBackendBase.MAX_NUM_THREADS_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e62632a202d8ff06 — Environment-variable access.
pkgs/python/[email protected]/joblib/__init__.py:163 
os.environ.setdefault("KMP_INIT_AT_FORK", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d05a8ccf7ded8468 — Environment-variable access.
pkgs/python/[email protected]/joblib/_memmapping_reducer.py:209 
        temp_folder = os.environ.get("JOBLIB_TEMP_FOLDER", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #876eb5d3120f18ef — Environment-variable access.
pkgs/python/[email protected]/joblib/_multiprocessing_helpers.py:13 
mp = int(os.environ.get("JOBLIB_MULTIPROCESSING", 1)) or None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #807dd41e01d55484 — Environment-variable access.
pkgs/python/[email protected]/joblib/_parallel_backends.py:238 
                var_value = os.environ.get(var, default_n_threads)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6f2c5b10fd3ba48 — Environment-variable access.
pkgs/python/[email protected]/joblib/_parallel_backends.py:244 
        if self.TBB_ENABLE_IPC_VAR not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b76c5b2e928db957 — Filesystem access.
pkgs/python/[email protected]/joblib/_store_backends.py:480 
                with open(gitignore, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4abd298395f9fad — Filesystem access.
pkgs/python/[email protected]/joblib/compressor.py:289 
            self._fp = io.open(filename, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3586467ac97a7dbc — Filesystem access.
pkgs/python/[email protected]/joblib/externals/loky/backend/context.py:151 
        with open(cpu_max_fname) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d173bbe5c71607c7 — Filesystem access.
pkgs/python/[email protected]/joblib/externals/loky/backend/context.py:156 
        with open(cfs_quota_fname) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a68af53dc5995d6 — Filesystem access.
pkgs/python/[email protected]/joblib/externals/loky/backend/context.py:158 
        with open(cfs_period_fname) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cc821c40d1d96b5 — Environment-variable access.
pkgs/python/[email protected]/joblib/externals/loky/backend/context.py:199 
            and os.environ.get("LOKY_MAX_CPU_COUNT") is None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25b00e7bf910ad53 — Environment-variable access.
pkgs/python/[email protected]/joblib/externals/loky/backend/context.py:222 
    cpu_count_loky = int(os.environ.get("LOKY_MAX_CPU_COUNT", os_cpu_count))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90dd23ffdd7adfa6 — Environment-variable access.
pkgs/python/[email protected]/joblib/externals/loky/backend/fork_exec.py:21 
    env = {**os.environ, **env}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbe3e226d5aee5a3 — Environment-variable access.
pkgs/python/[email protected]/joblib/externals/loky/backend/popen_loky_win32.py:73 
        child_env = {**os.environ, **process_obj.env}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #071a9b4d4e68756b — Filesystem access.
pkgs/python/[email protected]/joblib/externals/loky/backend/popen_loky_win32.py:83 
        with open(wfd, "wb") as to_child:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e9ed3fe30cb1521 — Environment-variable access.
pkgs/python/[email protected]/joblib/externals/loky/backend/reduction.py:89 
ENV_LOKY_PICKLER = os.environ.get("LOKY_PICKLER", DEFAULT_ENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76bad528bf36c599 — Filesystem access.
pkgs/python/[email protected]/joblib/externals/loky/backend/resource_tracker.py:284 
        with open(fd, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b022f2865c220ab2 — Environment-variable access.
pkgs/python/[email protected]/joblib/externals/loky/process_executor.py:93 
MAX_DEPTH = int(os.environ.get("LOKY_MAX_DEPTH", 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7ce43317fa43c66 — Environment-variable access.
pkgs/python/[email protected]/joblib/externals/loky/process_executor.py:382 
    if "PYTHONFAULTHANDLER" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db8cbfa20158e376 — Environment-variable access.
pkgs/python/[email protected]/joblib/externals/loky/process_executor.py:388 
            f"PYTHONFAULTHANDLER={os.environ['PYTHONFAULTHANDLER']}."

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a0333e95ad46a3e — Filesystem access.
pkgs/python/[email protected]/joblib/logger.py:125 
                with open(logfile, "w") as logfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7df6a796b400ba7f — Filesystem access.
pkgs/python/[email protected]/joblib/logger.py:150 
                with open(self.logfile, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8041146e7893ae4f — Filesystem access.
pkgs/python/[email protected]/joblib/numpy_pickle.py:599 
        with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bef3842a8820c0ab — Filesystem access.
pkgs/python/[email protected]/joblib/numpy_pickle.py:650 
    with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6f14b3987bac0cc — Filesystem access.
pkgs/python/[email protected]/joblib/numpy_pickle.py:735 
        with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7742f1cf651d4541 — Filesystem access.
pkgs/python/[email protected]/joblib/numpy_pickle_compat.py:156 
        with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1de98be9470a4420 — Filesystem access.
pkgs/python/[email protected]/joblib/numpy_pickle_compat.py:230 
    with open(filename, "rb") as file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a23be45043d33d4a — Environment-variable access.
pkgs/python/[email protected]/joblib/parallel.py:581 
    method = os.environ.get("JOBLIB_START_METHOD", "").strip() or None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

liger-kernel

python dependency
expand_more 15 low-confidence finding(s)
low env_fs tooling reachable #ef2b001a36337a24 — Filesystem access.
pkgs/python/[email protected]/benchmark/scripts/utils.py:272 
        with open(filename_abs_path, mode="r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #2e03a38971a1268e — Filesystem access.
pkgs/python/[email protected]/benchmark/scripts/utils.py:316 
    with open(filename_abs_path, mode="w", newline="") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #501e86a5e059cfaa — Filesystem access.
pkgs/python/[email protected]/dev/modal/benchmarks.py:44 
    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4febf3430217562 — Filesystem access.
pkgs/python/[email protected]/dev/modal/benchmarks.py:66 
        with open(local_data_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #d19b9ffadcf6d767 — Environment-variable access.
pkgs/python/[email protected]/examples/huggingface/launch_on_modal.py:38 
if "HF_TOKEN" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c10d4a6aae0415ee — Environment-variable access.
pkgs/python/[email protected]/examples/huggingface/launch_on_modal.py:40 
hf_token_secret = modal.Secret.from_dict({"HF_TOKEN": os.environ.get("HF_TOKEN", "")})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #e839648fae18cab0 — Environment-variable access.
pkgs/python/[email protected]/examples/huggingface/launch_on_modal.py:57 
    subprocess.run([script_path], check=True, cwd="/root", env=os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #fc23d68531703ba4 — Environment-variable access.
pkgs/python/[email protected]/examples/medusa/callback.py:335 
        world_size = int(os.environ.get("WORLD_SIZE", "1"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #19e8fb6f23a3b36d — Environment-variable access.
pkgs/python/[email protected]/examples/medusa/callback.py:337 
        if transformers.utils.strtobool(os.environ.get("ACCELERATE_USE_FSDP", "false")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #14bd038d8f13d390 — Environment-variable access.
pkgs/python/[email protected]/examples/medusa/callback.py:338 
            sharding_strategy = os.environ.get("FSDP_SHARDING_STRATEGY", FSDP_SHARDING_STRATEGY[0]).upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #7bdc51ffd70a744c — Environment-variable access.
pkgs/python/[email protected]/examples/medusa/callback.py:351 
                return world_size // int(os.environ.get("LOCAL_WORLD_SIZE", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #9bea27528ffdb295 — Filesystem access.
pkgs/python/[email protected]/examples/medusa/train.py:278 
    train_json = json.load(open(data_args.data_path, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b82cbbefaac277c4 — Environment-variable access.
pkgs/python/[email protected]/src/liger_kernel/ops/backends/_ascend/ub_manager.py:188 
        env_capacity = os.getenv("ASCEND_UB_CAPACITY_BITS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4976cfcb54b4d911 — Filesystem access.
pkgs/python/[email protected]/src/liger_kernel/triton/monkey_patch.py:26 
        with open(temp_path, mode) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aac6e9b0c1bbf085 — Environment-variable access.
pkgs/python/[email protected]/src/liger_kernel/triton/monkey_patch.py:40 
    os.environ["TRITON_CACHE_MANAGER"] = "liger_kernel.triton.monkey_patch:LigerTritonFileCacheManager"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

num2words

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #d2361137881771f5 — Filesystem access.
pkgs/python/[email protected]/setup.py:42 
LONG_DESC = open('README.rst', 'rt', encoding="utf-8").read() + '\n\n' + \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15ef3352ebad295a — Filesystem access.
pkgs/python/[email protected]/setup.py:43 
            open('CHANGES.rst', 'rt', encoding="utf-8").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cea2846a8053e401 — Filesystem access.
pkgs/python/[email protected]/setup.py:51 
    with open(fname, 'r', encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

packaging

python dependency
expand_more 3 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #ced2f5341a565f4a — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:11 
with open(os.path.join(_BASE_DIR, "src", "packaging", "__init__.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58af5f2bdad22d7a — Filesystem access.
pkgs/python/[email protected]/src/packaging/_manylinux.py:34 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7de3cf469357cb6e — Filesystem access.
pkgs/python/[email protected]/src/packaging/_musllinux.py:46 
        with open(executable, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

peft

python dependency
expand_more 12 low-confidence finding(s)
low env_fs dependency Excluded from app score #4bba3afcc0a27e46 — Filesystem access.
pkgs/python/[email protected]/setup.py:51 
    long_description=open("README.md", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #290967941942d3cf — Filesystem access.
pkgs/python/[email protected]/src/peft/config.py:69 
            direct_url = json.loads((dist.locate_file(path)).read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af04a91d8d78d186 — Filesystem access.
pkgs/python/[email protected]/src/peft/config.py:162 
        with open(output_path, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e0c6dad43193d31 — Filesystem access.
pkgs/python/[email protected]/src/peft/config.py:275 
        with open(path_json_file) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b98322157e3e9715 — Environment-variable access.
pkgs/python/[email protected]/src/peft/tuners/boft/layer.py:59 
        if key in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ede35b0b9c2fdda — Environment-variable access.
pkgs/python/[email protected]/src/peft/tuners/boft/layer.py:60 
            existing_vars[key] = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d055ade208ee1bb8 — Environment-variable access.
pkgs/python/[email protected]/src/peft/tuners/boft/layer.py:61 
        os.environ[key] = str(value)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #174fa1b50c549575 — Environment-variable access.
pkgs/python/[email protected]/src/peft/tuners/boft/layer.py:69 
            os.environ[key] = existing_vars[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9edc1b94acfd9e99 — Environment-variable access.
pkgs/python/[email protected]/src/peft/tuners/boft/layer.py:71 
            os.environ.pop(key, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ed54cab3d830a80 — Environment-variable access.
pkgs/python/[email protected]/src/peft/utils/other.py:1216 
    transformer_cls_names_to_wrap = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a7e68d9e6e6cfcf — Environment-variable access.
pkgs/python/[email protected]/src/peft/utils/other.py:1216 
    transformer_cls_names_to_wrap = os.environ.get(
        "FSDP_TRANSFORMER_CLS_TO_WRAP", default_transformer_cls_names_to_wrap
    ).split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd39d651a7e09d39 — Environment-variable access.
pkgs/python/[email protected]/src/peft/utils/other.py:1409 
    if str_to_bool(os.environ.get("HF_HUB_OFFLINE", "0")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pre-commit

python dependency
expand_more 57 low-confidence finding(s)
low env_fs dependency Excluded from app score #ab46e6a54035f53a — Environment-variable access.
pkgs/python/[email protected]/pre_commit/color.py:98 
            os.getenv('TERM') != 'dumb'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d2cd25991ce5305 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/color.py:105 
        '--color', default=os.environ.get('PRE_COMMIT_COLOR', 'auto'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bd2973e8e29693b — Filesystem access.
pkgs/python/[email protected]/pre_commit/commands/autoupdate.py:125 
    with open(path, newline='') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e8f81cda446b9f6 — Filesystem access.
pkgs/python/[email protected]/pre_commit/commands/autoupdate.py:135 
        with open(path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9da1190dee21729 — Filesystem access.
pkgs/python/[email protected]/pre_commit/commands/autoupdate.py:158 
    with open(path, 'w', newline='') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #578c9708301587fe — Environment-variable access.
pkgs/python/[email protected]/pre_commit/commands/hook_impl.py:22 
    if os.environ.get('PRE_COMMIT_RUNNING_LEGACY'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa0d6923ec5fe385 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/commands/hook_impl.py:55 
        if skip_on_missing_config or os.getenv('PRE_COMMIT_ALLOW_NO_CONFIG'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6830b78cc9ae72dc — Filesystem access.
pkgs/python/[email protected]/pre_commit/commands/install_uninstall.py:59 
    with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4e0f14198540965 — Filesystem access.
pkgs/python/[email protected]/pre_commit/commands/install_uninstall.py:92 
    with open(hook_path, 'w') as hook_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a360dfa7bb911ef6 — Filesystem access.
pkgs/python/[email protected]/pre_commit/commands/migrate_config.py:115 
    with open(config_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62825c821cde63c9 — Filesystem access.
pkgs/python/[email protected]/pre_commit/commands/migrate_config.py:129 
        with open(config_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ff30a8c2f988d19 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/commands/run.py:342 
        environ: MutableMapping[str, str] = os.environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5a1118707884403 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/commands/try_repo.py:37 
        env = dict(os.environ, GIT_INDEX_FILE=idx, GIT_OBJECT_DIRECTORY=objs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b5d96d6579a111d — Filesystem access.
pkgs/python/[email protected]/pre_commit/commands/try_repo.py:68 
        with open(config_filename, 'w') as cfg:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #faf09cf5bdeee497 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/envcontext.py:47 
    env = os.environ if _env is None else _env

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e336bbcae3a76a8e — Filesystem access.
pkgs/python/[email protected]/pre_commit/error_handler.py:36 
            log: IO[bytes] = ctx.enter_context(open(log_path, 'wb'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b5c0df140b3eb4b — Filesystem access.
pkgs/python/[email protected]/pre_commit/file_lock.py:73 
    with open(path, 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51fa835242f7dbf2 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/git.py:36 
    _env = _env if _env is not None else os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ed14e55f3e8219e — Filesystem access.
pkgs/python/[email protected]/pre_commit/git.py:118 
    with open(os.path.join(get_git_dir('.'), 'MERGE_MSG'), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8c9ff3e99d6062e — Environment-variable access.
pkgs/python/[email protected]/pre_commit/lang_base.py:136 
    if 'PRE_COMMIT_NO_CONCURRENCY' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #257f33841c3144a0 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/lang_base.py:140 
        if 'TRAVIS' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bde1d395fe43cf1 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/languages/conda.py:51 
    if os.environ.get('PRE_COMMIT_USE_MICROMAMBA'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecb4b2203ddb3a4b — Environment-variable access.
pkgs/python/[email protected]/pre_commit/languages/conda.py:53 
    elif os.environ.get('PRE_COMMIT_USE_MAMBA'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #449c4ff1c9ebc439 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/languages/dart.py:49 
        dart_env = {**os.environ, 'PUB_CACHE': pub_cache}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f33446be68361f9b — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/dart.py:51 
        with open(prefix_p.path('pubspec.yaml')) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ee3a44318460a86 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/languages/dart.py:83 
                env={**os.environ, 'PUB_CACHE': dep_tmp},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5688b5b25e920145 — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/docker.py:36 
        with open('/proc/1/mountinfo', 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20be21be3ce52226 — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/dotnet.py:43 
        with open(nuget_config, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #035da4da13503969 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/pre_commit/languages/golang.py:92 
    resp = urllib.request.urlopen('https://go.dev/dl/?mode=json')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #da7d73fff0314de2 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/languages/golang.py:145 
    env = no_git_env(dict(os.environ, GOPATH=gopath))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f13b63d35dbd85ad — Environment-variable access.
pkgs/python/[email protected]/pre_commit/languages/golang.py:151 
            os.path.join(env_dir, '.go', 'bin'), os.environ['PATH'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a9165eb319be80b — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/julia.py:91 
            open(os.path.join(envdir, 'Project.toml'), 'a').close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d3394acdf30cbc4 — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/pygrep.py:24 
    with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a8517525decccdf — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/pygrep.py:35 
    with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e57939a5d3c42db7 — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/pygrep.py:54 
    with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc7c609fef512e2b — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/pygrep.py:67 
    with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0c7eead85417fdc — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/python.py:38 
    with open(filename, encoding='UTF-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3df31e626effecd8 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/languages/python.py:70 
        env = dict(os.environ, PYTHONIOENCODING='UTF-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba87c2d6cb3b5c6d — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/r.py:118 
        with open(fname, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f2583460720f218 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/languages/r.py:150 
    r_home = os.environ.get('R_HOME')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff278afb6083ec56 — Filesystem access.
pkgs/python/[email protected]/pre_commit/languages/rust.py:97 
                with open(rustup_init, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c09e856441cd3aa — Environment-variable access.
pkgs/python/[email protected]/pre_commit/main.py:39 
os.environ.pop('__PYVENV_LAUNCHER__', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd229d82e9f02c8f — Environment-variable access.
pkgs/python/[email protected]/pre_commit/main.py:42 
os.environ.pop('PYTHONEXECUTABLE', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a69921b65f0b9e9 — Filesystem access.
pkgs/python/[email protected]/pre_commit/output.py:22 
            stream = exit_stack.enter_context(open(logfile_name, 'ab'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a47c02ac025a5720 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/parse_shebang.py:29 
    environ = env if env is not None else os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04f0b3b8ea3a87de — Filesystem access.
pkgs/python/[email protected]/pre_commit/repository.py:42 
        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee060aeaf69d714d — Filesystem access.
pkgs/python/[email protected]/pre_commit/repository.py:101 
        with open(staging, 'w') as state_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #191e83e461102123 — Filesystem access.
pkgs/python/[email protected]/pre_commit/repository.py:106 
        open(_state_filename_v2(venv), 'a+').close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e36667f66533dab — Filesystem access.
pkgs/python/[email protected]/pre_commit/staged_files_only.py:74 
        with open(patch_filename, 'wb') as patch_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a866eb6a96cd7c3e — Environment-variable access.
pkgs/python/[email protected]/pre_commit/staged_files_only.py:78 
        no_checkout_env = dict(os.environ, _PRE_COMMIT_SKIP_POST_CHECKOUT='1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8135177f8d6b5640 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/store.py:32 
    ret = os.environ.get('PRE_COMMIT_HOME') or os.path.join(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d4a0a17e401bd56 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/store.py:33 
        os.environ.get('XDG_CACHE_HOME') or os.path.expanduser('~/.cache'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f9d6e97e83b87fa — Filesystem access.
pkgs/python/[email protected]/pre_commit/store.py:55 
        with open(target_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #995331157a60813b — Filesystem access.
pkgs/python/[email protected]/pre_commit/store.py:72 
            with open(os.path.join(self.directory, 'README'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f95276be86102e1e — Filesystem access.
pkgs/python/[email protected]/pre_commit/util.py:40 
    return files.joinpath(filename).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9097e3c5b837343b — Filesystem access.
pkgs/python/[email protected]/pre_commit/util.py:176 
        with open(os.devnull) as devnull, Pty() as pty:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ac7fffaa07d4098 — Environment-variable access.
pkgs/python/[email protected]/pre_commit/xargs.py:42 
    environ = _env if _env is not None else getattr(os, 'environb', os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pydantic

python dependency
expand_more 9 low-confidence finding(s)
low env_fs dependency Excluded from app score #d4d521af0f556018 — Filesystem access.
pkgs/python/[email protected]/pydantic/deprecated/parse.py:71 
    b = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bc8274afb6cc819 — Environment-variable access.
pkgs/python/[email protected]/pydantic/json_schema.py:344 
                if os.getenv('PYDANTIC_PRIVATE_ALLOW_UNHANDLED_SCHEMA_TYPES'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc2f366b9396b318 — Filesystem access.
pkgs/python/[email protected]/pydantic/mypy.py:1411 
    with open(config_file, 'rb') as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f556408928c068ac — Environment-variable access.
pkgs/python/[email protected]/pydantic/plugin/_loader.py:27 
    disabled_plugins = os.getenv('PYDANTIC_DISABLE_PLUGINS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f2fe49b8647214c — Environment-variable access.
pkgs/python/[email protected]/pydantic/v1/env_settings.py:173 
            env_vars: Mapping[str, Optional[str]] = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24bded6b633fd0e9 — Environment-variable access.
pkgs/python/[email protected]/pydantic/v1/env_settings.py:175 
            env_vars = {k.lower(): v for k, v in os.environ.items()}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83cab2baf49f1843 — Filesystem access.
pkgs/python/[email protected]/pydantic/v1/env_settings.py:307 
                    secret_value = path.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e80c5715eda94bac — Filesystem access.
pkgs/python/[email protected]/pydantic/v1/mypy.py:948 
    with open(config_file, read_mode) as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12c827eab958b803 — Filesystem access.
pkgs/python/[email protected]/pydantic/v1/parse.py:57 
    b = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

requests

python dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #80c70338423c298f — Environment-variable access.
pkgs/python/[email protected]/src/requests/sessions.py:857 
                    os.environ.get("REQUESTS_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0445d7f65f7ae67a — Environment-variable access.
pkgs/python/[email protected]/src/requests/sessions.py:858 
                    or os.environ.get("CURL_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6806eeb1d7bfb9aa — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:239 
    netrc_file = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e685ce4b30de52ce — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:798 
        old_value = os.environ.get(env_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2d550579131aa2c — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:799 
        os.environ[env_name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51a5737bb115d132 — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:805 
                del os.environ[env_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e6ca1b808bd08be — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:807 
                os.environ[env_name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb299ede030ab54d — Environment-variable access.
pkgs/python/[email protected]/src/requests/utils.py:820 
        return os.environ.get(key) or os.environ.get(key.upper())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

scikit-learn

python dependency
expand_more 50 low-confidence finding(s)
low env_fs dependency Excluded from app score #6105697ea3bfd30c — Environment-variable access.
pkgs/python/[email protected]/doc/conf.py:122 
if os.environ.get("NO_MATHJAX"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc8dea4f7937b828 — Filesystem access.
pkgs/python/[email protected]/doc/conf.py:622 
            with open(readme, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cefea207e25c0917 — Filesystem access.
pkgs/python/[email protected]/doc/conf.py:819 
    with open(searchindex_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8229906fc4029f67 — Filesystem access.
pkgs/python/[email protected]/doc/conf.py:825 
    with open(searchindex_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7229bb112a13f70 — Environment-variable access.
pkgs/python/[email protected]/doc/conf.py:884 
if os.environ.get("SKLEARN_WARNINGS_AS_ERRORS", "0") != "0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6e8d2370be135ec — Environment-variable access.
pkgs/python/[email protected]/doc/conf.py:975 
github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3d76656649efc9f — Environment-variable access.
pkgs/python/[email protected]/doc/conftest.py:49 
    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #687bbb0a2eeb3779 — Filesystem access.
pkgs/python/[email protected]/examples/applications/plot_out_of_core_classification.py:171 
        assert sha256(archive_path.read_bytes()).hexdigest() == ARCHIVE_SHA256

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #6f52b26c0cec9a34 — Filesystem access.
pkgs/python/[email protected]/examples/applications/plot_out_of_core_classification.py:180 
        for doc in parser.parse(open(filename, "rb")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #64159306eb2092ec — Filesystem access.
pkgs/python/[email protected]/examples/applications/wikipedia_principal_eigenvector.py:60 
        with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fe77fe0a64c1fbc — Environment-variable access.
pkgs/python/[email protected]/sklearn/__init__.py:56 
os.environ.setdefault("KMP_DUPLICATE_LIB_OK", "True")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b7cc1db7c0659b3 — Environment-variable access.
pkgs/python/[email protected]/sklearn/__init__.py:60 
os.environ.setdefault("KMP_INIT_AT_FORK", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cbd34ed229219455 — Environment-variable access.
pkgs/python/[email protected]/sklearn/__init__.py:145 
    _random_seed = os.environ.get("SKLEARN_SEED", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78bbf3166e7b41d0 — Filesystem access.
pkgs/python/[email protected]/sklearn/_build_utils/tempita.py:22 
    with open(fromfile, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b984e4947760975 — Filesystem access.
pkgs/python/[email protected]/sklearn/_build_utils/tempita.py:28 
    with open(outfile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c12c7e128624c397 — Filesystem access.
pkgs/python/[email protected]/sklearn/_build_utils/version.py:11 
data = open(sklearn_init).readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dda6dea00f6efed7 — Environment-variable access.
pkgs/python/[email protected]/sklearn/_config.py:11 
    "assume_finite": bool(os.environ.get("SKLEARN_ASSUME_FINITE", False)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #848832ebdc5eafef — Environment-variable access.
pkgs/python/[email protected]/sklearn/_config.py:12 
    "working_memory": int(os.environ.get("SKLEARN_WORKING_MEMORY", 1024)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e045f3136ec60f69 — Environment-variable access.
pkgs/python/[email protected]/sklearn/_config.py:16 
        os.environ.get("SKLEARN_PAIRWISE_DIST_CHUNK_SIZE", 256)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #502dddbdc8a6bf29 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:62 
    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14b91e3c8d925b0f — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:89 
    environ.get("SKLEARN_RUN_FLOAT32_TESTS", "0") != "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5efec37ae6da6ba — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:102 
    download_if_missing = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39b8571bad949561 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:139 
    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a378fee47e6ac858 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:172 
    worker_id = environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4a7eecddaa53c31 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:398 
    random_seed_var = environ.get("SKLEARN_TESTS_GLOBAL_RANDOM_SEED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc586a1e2ee0330d — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:450 
    xdist_worker_count = environ.get("PYTEST_XDIST_WORKER_COUNT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15325b0cee9a9168 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:457 
    if environ.get("SKLEARN_WARNINGS_AS_ERRORS", "0") != "0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77db5304ab015b4c — Environment-variable access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:83 
        data_home = environ.get("SCIKIT_LEARN_DATA", join("~", "scikit_learn_data"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4869409c0d8d652 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:309 
            data.append(Path(filename).read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47efde4448c44ace — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:489 
    return path.read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3ac6c9ef6ba5276 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:1428 
    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2023b8a7ad2c92b7 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_lfw.py:441 
    with open(index_file_path, "rb") as index_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #462593551b2890d5 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_svmlight_format_io.py:197 
        return open(f, "rb", closefd=False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e01cda9515dc155 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_svmlight_format_io.py:213 
        return open(f, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48bf90e8e7a62008 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_svmlight_format_io.py:590 
        with open(f, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ed16611f2f97127 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_twenty_newsgroups.py:96 
    with open(cache_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d242522aeba8f5c — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_twenty_newsgroups.py:307 
            with open(cache_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6155e8dfa3232ef — Filesystem access.
pkgs/python/[email protected]/sklearn/feature_extraction/text.py:232 
            with open(doc, "rb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fa921820d12a97c — Filesystem access.
pkgs/python/[email protected]/sklearn/tree/_export.py:929 
            out_file = open(out_file, "w", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a46d4973e2b2851d — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_array_api.py:182 
    if os.environ.get("SCIPY_ARRAY_API") != "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61cba0aa20026fb2 — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:20 
    estimator_css = estimator_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66b23afc5835f405 — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:21 
    params_css = params_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1083535123df599 — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:22 
    features_css = features_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa054c1ad65d3309 — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:563 
        with open(str(Path(__file__).parent / "estimator.js"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7604382ae04b89ca — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:367 
    if int(os.environ.get("SKLEARN_SKIP_NETWORK_TESTS", 0)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #153d47219656383d — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:926 
        with open(source_file, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d58f7881af32826 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:930 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5eb04d8becec57b8 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:937 
        coverage_rc = os.environ.get("COVERAGE_PROCESS_START")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42a059596fc2daf0 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:1334 
    if os.environ.get("SCIPY_ARRAY_API") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56594f60e7b951c6 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:1363 
        if os.getenv("PYTORCH_ENABLE_MPS_FALLBACK") != "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

uvicorn

python dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #66853c3928d9a425 — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:351 
        if workers is None and "WEB_CONCURRENCY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bda89b915e56ccb — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:352 
            self.workers = int(os.environ["WEB_CONCURRENCY"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b159ff1626a8f4d — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:356 
            self.forwarded_allow_ips = os.environ.get("FORWARDED_ALLOW_IPS", "127.0.0.1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9eb6eb48aa1c135 — Filesystem access.
pkgs/python/[email protected]/uvicorn/config.py:393 
                with open(self.log_config) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9346c77b911e79d — Filesystem access.
pkgs/python/[email protected]/uvicorn/config.py:404 
                with open(self.log_config) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • bitsandbytes prod — no sdist (wheels only)
  • vllm prod — sdist exceeds byte cap
  • Pillow prod — sdist exceeds byte cap
  • torchvision prod — no sdist (wheels only)