Close Open Privacy Scan

link https://github.com/cline/cline
bolt Snapshot: commit c2faf38
science engine v1.22
schedule 2026-07-20T08:49:48.614428+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

smart_toy MCP server detected: @ai-sdk/anthropic, @ai-sdk/openai, @anthropic-ai/sdk, @modelcontextprotocol/sdk +2 more — detected in dependencies, not a safety judgment.

App Privacy Score

100 /100
Low privacy risk

Low risk · 61 finding(s)

Dependency score: 72 (Medium risk)

bar_chart Score Breakdown

No category deductions recorded.

list Scan Summary

0 high 0 medium 61 low
First-party packages: 1
Dependency packages: 4
Ecosystem: rust

swap_horiz External domains

100.82.5.118agentskills.ioai-gateway.vercel.shai-sdk.devai.google.devaihubmix.comaiplatform.googleapis.comaistudio.google.comapexsurveys.oracle.comapi.aiapi.aihubmix.comapi.anthropic.comapi.asksage.aiapi.cerebras.aiapi.cline.botapi.deepseek.comapi.dify.aiapi.exa.aiapi.fireworks.aiapi.getdial.aiapi.github.comapi.groq.comapi.hicap.aiapi.inference.wandb.aiapi.kilo.aiapi.minimax.ioapi.mistral.aiapi.moonshot.aiapi.novu.coapi.openai.comapi.sambanova.aiapi.studio.nebius.aiapi.telegram.orgapi.together.aiapi.together.xyzapi.v0.devapi.workos.comapi.x.aiapi.xiaomimimo.comapi.z.aiapp.baseten.coapp.cline.botapp.example.botapp.posthog.comapp.requestly.ioark.cn-beijing.volces.comauth.openai.comauth.tokenfactory.nebius.comautopush-generativelanguage.sandbox.googleapis.comavatars.githubusercontent.combailian.console.aliyun.combase-ui.combedrock-agent-runtime.us-west-2.amazonaws.combedrock-mantle.us-east-1.api.awsbedrock-runtime.us-east-1.amazonaws.combitcoin.orgchatgpt.comclaude.aicline.botcline.github.iocloud.cerebras.aicloud.google.comcloud.langfuse.comcloud.tencent.comcode-internal.aiservice.us-chicago-1.oci.oraclecloud.comcode.aiservice.us-chicago-1.oci.oraclecloud.comcommunity.cline.botconfluence.oraclecorp.comconsole.aihubmix.comconsole.anthropic.comconsole.groq.comconsole.mistral.aiconsole.volcengine.comcore-api.staging.int.cline.botcursor.comcustomersurveys.oracle.comdashboard.hicap.aidashscope.aliyuncs.comdata.cline.botdevelopers.openai.comdiscord.comdiscord.ggdocs.anthropic.comdocs.cline.botdocs.cloud.google.comdocs.expo.devdocs.litellm.aidocs.sambanova.aidummy.comejiidnob33g9ap1r.public.blob.vercel-storage.comexample.ngrok-free.appfirebaseinstallations.googleapis.comfirebaselogging.googleapis.comfireworks.aifonts.googleapis.comgemini-api-demos.uc.r.appspot.comgenerativelanguage.googleapis.comgithub.comgoo.glgoogle.aip.devhelp.openai.comhelp.sap.comheroui-assets.nyc3.cdn.digitaloceanspaces.comheroui.comhuggingface.coidcs-9dc693e80d9b469480d7afe00e743931.identity.oraclecloud.comimg.heroui.chatinfer-modelarts.cn-southwest-2.myhuaweicloud.cominference-api.nousresearch.cominference.baseten.coinference.poolside.aiinvalid-url-to-show-fallback.comjs-na2.hs-scripts.comjson-schema.orglmstudio.ailogin-ext.identity.oraclecloud.commanagement.azure.commarketplace.visualstudio.commodel-api.baseten.comodelcontextprotocol.iomodels.devnews.google.comnpm.imoauth2.googleapis.comontheline.trincoll.eduopen.bigmodel.cnopenrouter.aiplatform.claude.complatform.moonshot.aiplatform.moonshot.cnplatform.openai.compokeapi.coposthog.compptr.devpurl.oclc.orgpurl.orgradix-ui.comraw.githubusercontent.comreact.devregistry.npmjs.orgrouter.huggingface.corouter.requesty.aischemas.microsoft.comschemas.openxmlformats.orgschemas.zwobble.orgscira.aisentry.ioskills.shstaging-app.cline.botstorage.googleapis.comsupport.huaweicloud.comswapi.py4e.comt3.chattokenhub.tencentmaas.comus.i.posthog.comus.posthog.comv0.appvercel.comvia.placeholder.comwandb.aiwww.allrecipes.comwww.anthropic.comwww.apple.comwww.baseten.cowww.deepseek.comwww.foodnetwork.comwww.google.comwww.googleapis.comwww.gstatic.comwww.linkedin.comwww.minimax.iowww.reddit.comwww.w3.orgx.aix.comz.ai

</> First-Party Code

first-party (rust): apps/examples/desktop-app/src-tauri

rust first-party
expand_more 4 low-confidence finding(s)
low env_fs test-only Excluded from app score #94562a6c0754fbf0 — Environment-variable access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:200 
    let explicit = std::env::var("CLINE_CODE_SIDECAR_BIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #94dc6f1e79882b7c — Environment-variable access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:364 
    if let Ok(value) = std::env::var("CLINE_MCP_SETTINGS_PATH") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2397681cc8c2d025 — Environment-variable access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:370 
    let home = std::env::var("HOME").map_err(|_| "HOME is not set".to_string())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a94f1064baeed6be — Filesystem access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:469 
        fs::write(&settings_path, body)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

rfd

rust dependency
expand_more 9 low-confidence finding(s)
low env_fs dependency Excluded from app score #9f85cd0bdcc2e807 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:2 
    let target_os = std::env::var("CARGO_CFG_TARGET_OS").expect("target OS not detected");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfa2813d94eb2529 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:8 
            let gtk = std::env::var_os("CARGO_FEATURE_GTK3").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fad4813331571226 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:9 
            let xdg = std::env::var_os("CARGO_FEATURE_XDG_PORTAL").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f73f11e76cf532d9 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:18 
                let tokio = std::env::var_os("CARGO_FEATURE_TOKIO").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a998f1c8319580ca — Environment-variable access.
pkgs/rust/[email protected]/build.rs:19 
                let async_std = std::env::var_os("CARGO_FEATURE_ASYNC_STD").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #c1022f695ec4ef94 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/backend/macos/utils/user_alert.rs:183 
            log::error!("UserAler result send error: {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #f13633e5da3a065a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/backend/macos/utils/user_alert.rs:191 
                log::error!("UserAler error: {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #30b9581ac1006900 — Filesystem access.
pkgs/rust/[email protected]/src/file_handle/native.rs:29 
                    let res = std::fs::read(path);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4deeea40674ed9e — Filesystem access.
pkgs/rust/[email protected]/src/file_handle/native.rs:82 
                    let res = std::fs::write(path, bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

serde

rust dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #304cbdc1e7ee6d9b — Environment-variable access.
pkgs/rust/[email protected]/build.rs:24 
    let out_dir = PathBuf::from(env::var_os("OUT_DIR").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c16a7e3338f9d67f — Environment-variable access.
pkgs/rust/[email protected]/build.rs:25 
    let patch_version = env::var("CARGO_PKG_VERSION_PATCH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #940162f4061cce3a — Filesystem access.
pkgs/rust/[email protected]/build.rs:27 
    fs::write(out_dir.join("private.rs"), module).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b78bfbd3457b933f — Environment-variable access.
pkgs/rust/[email protected]/build.rs:61 
    let rustc = env::var_os("RUSTC")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

serde_json

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #07019cbb30e63fd1 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:10 
    let target_arch = env::var_os("CARGO_CFG_TARGET_ARCH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcb9378a6c68fb2d — Environment-variable access.
pkgs/rust/[email protected]/build.rs:11 
    let target_pointer_width = env::var_os("CARGO_CFG_TARGET_POINTER_WIDTH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tauri

rust dependency
expand_more 42 low-confidence finding(s)
low env_fs dependency Excluded from app score #e23885438afa16e7 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:241 
  std::env::var(format!("CARGO_FEATURE_{}", AsShoutySnakeCase(feature)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67416d1e66f986e6 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:263 
  let target_os = std::env::var("CARGO_CFG_TARGET_OS").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #962d3fc9f9214ebd — Environment-variable access.
pkgs/rust/[email protected]/build.rs:268 
  let out_dir = PathBuf::from(env::var("OUT_DIR").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15c3f216eb26a624 — Filesystem access.
pkgs/rust/[email protected]/build.rs:271 
  std::fs::write(
    checked_features_out_path,
    CHECKED_FEATURES.get().unwrap().lock().unwrap().join(","),
  )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5abce13859bea43e — Environment-variable access.
pkgs/rust/[email protected]/build.rs:279 
  let target_env = std::env::var("CARGO_CFG_TARGET_ENV");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e13bda53c3a7de9 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:280 
  let is_tauri_workspace = std::env::var("__TAURI_WORKSPACE__").is_ok_and(|v| v == "true");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c26c904abaaf620f — Environment-variable access.
pkgs/rust/[email protected]/build.rs:287 
      std::env::var(var).unwrap_or_else(|_| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c030018bb43d1ae7 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:292 
    if let Ok(kotlin_out_dir) = std::env::var("WRY_ANDROID_KOTLIN_FILES_OUT_DIR") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6683e37b6b3e17f7 — Filesystem access.
pkgs/rust/[email protected]/build.rs:311 
        let content = fs::read_to_string(file.path())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51aa3bdc120bad74 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:324 
    if let Some(project_dir) = env::var_os("TAURI_ANDROID_PROJECT_PATH").map(PathBuf::from) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c01afca9d75287d — Environment-variable access.
pkgs/rust/[email protected]/build.rs:325 
      let package_unescaped = env::var("TAURI_ANDROID_PACKAGE_UNESCAPED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2ffb09e0b2ed817 — Filesystem access.
pkgs/rust/[email protected]/build.rs:329 
      std::fs::write(
        project_dir.join("app").join("proguard-tauri.pro"),
        tauri_proguard,
      )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91ac391f61580258 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:337 
      PathBuf::from(std::env::var_os("CARGO_MANIFEST_DIR").unwrap()).join("mobile/android");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4abc7a6c70768c3 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:345 
        PathBuf::from(std::env::var_os("CARGO_MANIFEST_DIR").unwrap()).join("mobile/ios-api");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c3d4b4761c1d743 — Filesystem access.
pkgs/rust/[email protected]/src/app.rs:361 
        return std::fs::read(asset_path).ok().map(|bytes| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #6835ba28e8c683c4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:576 
      log::error!("failed to exit: {}", e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ffd442ffffdd106c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:590 
      log::debug!("restart triggered on the main thread");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #547261c96fb68d97 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:594 
      log::debug!("restart triggered from a separate thread");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #575928446ac11f86 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:606 
          log::error!("failed to request exit: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #b0718998324f1d7d — Filesystem access.
pkgs/rust/[email protected]/src/image/mod.rs:97 
    let bytes = std::fs::read(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #6cada66039472fd1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:74 
            log::debug!("Unknown CspHash variant encountered: {:?}", _csp_hash);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b385d23cb0d020c1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:409 
        log::debug!("Asset `{path}` not found; fallback to {path}.html");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #6596a053dce9807a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:416 
        log::debug!("Asset `{path}` not found; fallback to {path}/index.html",);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #a973801f6a73363f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:423 
        log::debug!("Asset `{path}` not found; fallback to index.html");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ca1111b553277741 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:431 
        log::error!("{error}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #0733b3ae4d5a075e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/path/android.rs:54 
          log::error!("failed to get file name from URI: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #5cd3ea5ca148663d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/process.rs:84 
      log::error!("failed to restart app: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #dcae01c579502091 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/process.rs:122 
            log::error!("failed to restart app: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #301f52ad168e234a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:42 
    log::error!("asset protocol path \"{}\" is not valid: {}", path, e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #e03e467a5c92ecd8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:47 
    log::error!("asset protocol not configured to allow the path: {}", path);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #27246733bbf3253f — Filesystem access.
pkgs/rust/[email protected]/src/protocol/asset.rs:52 
  let mut file = match File::open(path.clone()) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #49165cda69ac6423 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:58 
          log::error!("Failed to open Android external storage file '{}': {}. This may be due to missing storage permissions.", path, e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #6739f80fa29f66aa — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:62 
        log::error!("File does not exist at path: {}", path);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #9ad23aab6e710494 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:65 
        log::error!("Missing OS permission to access path \"{}\": {}", path, e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #8a296d73d2e21579 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:133 
          log::info!("adding dev server root certificate");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #c2b00cac6ea3f951 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:145 
          log::warn!(
            "the dev root-certificate-path option was provided, but you must enable one of the following Tauri features in Cargo.toml: native-tls, native-tls-vendored, rustls-tls"
          );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #315262824a269e86 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:150 
        log::warn!(
          "loading HTTPS URL; you might need to provide a certificate via the `dev --root-certificate-path` option. You must enable one of the following Tauri features in Cargo.toml: native-tls, native-tls-vendored, rustls-tls"
        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #0c106c4ffceb7dbe — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:206 
        log::error!("{error_message}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #70ee8c7e8b14c4af — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:396 
          tracing::error!("failed to resolve data directory");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #7ade60446f804142 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:403 
              tracing::error!(
                "data_directory `{}` is not a safe path, ignoring config. Validation error was: {_err}",
                data_directory.display()
              );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #590295368353a55f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:416 
              tracing::error!(
                "data_directory `{}` is not a relative path, ignoring config.",
                data_directory.display()
              );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #77c006aaeed7c488 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:1750 
      tracing::error!(
        "__TAURI_INVOKE_KEY__ expected {expected} but received {}",
        request.invoke_key
      );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

Skipped dependencies

Production

  • @cline/shared prod — dist-only: no readable source
  • @cline/llms prod — dist-only: no readable source
  • @cline/agents prod — dist-only: no readable source
  • @cline/core prod — dist-only: no readable source
  • @types/uuid prod — no javascript source
  • @chat-adapter/discord prod — dist-only: no readable source
  • @chat-adapter/linear prod — dist-only: no readable source
  • @chat-adapter/gchat prod — dist-only: no readable source
  • @chat-adapter/slack prod — dist-only: no readable source
  • @chat-adapter/telegram prod — dist-only: no readable source
  • @chat-adapter/whatsapp prod — dist-only: no readable source
  • @cline/cline-hub prod — registry 404
  • @clack/prompts prod — dist-only: no readable source
  • class-variance-authority prod — dist-only: no readable source
  • framer-motion prod — dist-only: no readable source
  • fuse.js prod — dist-only: no readable source
  • magic-string prod — dist-only: no readable source
  • mermaid prod — dist-only: no readable source
  • react-textarea-autosize prod — dist-only: no readable source
  • react-virtuoso prod — dist-only: no readable source
  • @radix-ui/react-use-controllable-state prod — dist-only: no readable source
  • @rive-app/react-webgl2 prod — dist-only: no readable source
  • @shikijs/langs prod — dist-only: no readable source
  • @shikijs/themes prod — dist-only: no readable source
  • @streamdown/cjk prod — dist-only: no readable source
  • @xyflow/react prod — dist-only: no readable source
  • cmdk prod — dist-only: no readable source
  • motion prod — dist-only: no readable source
  • next-themes prod — dist-only: no readable source
  • react-jsx-parser prod — dist-only: no readable source
  • shadcn prod — dist-only: no readable source
  • shiki prod — dist-only: no readable source
  • sonner prod — dist-only: no readable source
  • streamdown prod — dist-only: no readable source
  • tokenlens prod — dist-only: no readable source
  • use-stick-to-bottom prod — dist-only: no readable source
  • @cline/sdk prod — dist-only: no readable source
  • @radix-ui/react-accordion prod — dist-only: no readable source
  • @radix-ui/react-aspect-ratio prod — dist-only: no readable source