Close Open Privacy Scan

link https://github.com/huggingface/text-generation-inference
bolt Snapshot: commit b4adbf2
science engine v1.21
schedule 2026-07-18T18:14:36.668993+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

smart_toy AI deps detected: openai — detected in dependencies, not a safety judgment.

App Privacy Score

67 /100
Medium privacy risk

Medium risk · 821 finding(s)

Dependency score: 57 (Medium risk)

bar_chart Score Breakdown

telemetry −25
egress −5
env_fs −3

list Scan Summary

0 high 5 medium 816 low
First-party packages: 8
Dependency packages: 36
Ecosystem: rust

swap_horiz External domains

0x10c.com687fb701029421ae5549d998--8000.hf.jobs::ffff:192.168.0.1ab-initio.mit.eduabseil.ioacademic.oup.comaclanthology.orgaclweb.orgaddress.localaesara.readthedocs.ioagda.readthedocs.ioaggregate.ee.engr.uky.eduaheui.github.ioaima.cs.berkeley.edualgorithmist.comalloy.mit.eduami.ektf.huampl.comandroid.stackexchange.comangular.ioapi-inference.huggingface.coapi.cerebras.aiapi.cohere.comapi.deepinfra.comapi.endpoints.huggingface.cloudapi.featherless.aiapi.fireworks.aiapi.github.comapi.groq.comapi.novita.aiapi.nuget.orgapi.openai.comapi.openml.orgapi.publicai.coapi.replicate.comapi.scaleway.aiapi.slack.comapi.telegram.orgapi.together.xyzapi.wavespeed.aiapi.yelp.comapi.z.aiapp.neptune.aiarchive.ics.uci.eduarchive.orgarduino.ccarrow.apache.orgarstechnica.comartowen.su.domainsarturo-lang.ioarxiv.orgasymptote.sf.netatom.ioaugeas.netaws.amazon.comawsdocs-neuron.readthedocs-hosted.comawslabs.github.ioaxiom-wiki.newsynthesis.orgazure.microsoft.combaremessages.orgberry-lang.github.iobford.infobitbucket.orgbl.ocks.orgblackboxframework.orgblackforestlabs.aiblitzbasic.comblitzresearch.itch.ioblog.alifaraji.irblog.fal.aiblog.famzah.netblog.ganssle.ioblogs.ams.orgblogs.mathworks.comblogs.oracle.combmva-archive.org.ukboa.cs.iastate.eduboogie-docs.readthedocs.iobooks.google.combootlin.combosh.iobost.ocks.orgbrew.shbrotlipy.readthedocs.iobugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcacr.uwaterloo.cacapnproto.orgcassandra.apache.orgcbcl.mit.educc65.github.iocdn-datasets.huggingface.cocdn-media.huggingface.cocdn.britannica.comcdn.datatables.netcdn.jsdelivr.netcdn.mathjax.orgcdnjs.cloudflare.comcecas.clemson.educens.ioc.eeceylon-lang.orgcfengine.orgcgi.di.uoa.grcgm.cs.mcgill.cachaiscript.comchapel-lang.orgchardet.feedparser.orgcharm.cs.illinois.educirru.orgciteseer.ist.psu.educiteseerx.ist.psu.educivitai.comcjheath.github.ioclang.llvm.orgclaylabs.comclean.cs.ru.nlclear.mlclick.palletsprojects.comclickhouse.comclip-cn-beijing.oss-cn-beijing.aliyuncs.comclojure.orgcloud.google.comcmake.orgcode.activestate.comcode.google.comcode.jquery.comcode.kx.comcodelabs.developers.google.comcoffeescript.orgcolab.research.google.comcole-maclean.github.iocollaboration.cmc.ec.gc.cacommunity.sap.comconnect.buildconnectrpc.comcookbook.openai.comcoq.inria.frcoqui.aicore.telegram.orgcouchdb.apache.orgcplint.eucran.r-project.orgcrates.iocrmsh.github.iocrypto.cs.mcgill.cacryptography.iocrystal-lang.orgcs-people.bu.educs.nyu.educsound.comcucumber.iocve.mitre.orgcxx.rscython.orgd3js.orgdagshub.comdarcs.netdaringfireball.netdart.devdask.pydata.orgdata-apis.orgdata.iana.orgdatasets-server.huggingface.codatatracker.ietf.orgdb.apache.orgdbpubs.stanford.edudeeplearning.netdeprecated.readthedocs.iodev-discuss.pytorch.orgdevblogs.nvidia.comdevcenter.heroku.comdeveloper.algorand.orgdeveloper.android.comdeveloper.apple.comdeveloper.mozilla.orgdeveloper.nvidia.comdeveloper.r-project.orgdevelopers.google.comdigitalassets.lib.berkeley.edudilbert.engr.ucdavis.edudiscord.comdiscordpy.readthedocs.iodiscuss.huggingface.codiscuss.python.orgdiscuss.pytorch.orgdistributed.dask.orgdl.acm.orgdlang.orgdlmf.nist.govdmlc.github.iodoc.qt.iodoc.rust-lang.orgdocbook.sourceforge.netdocker.iodocs.aeternity.comdocs.aiohttp.orgdocs.astropy.orgdocs.aws.amazon.comdocs.bodo.aidocs.dask.orgdocs.databricks.comdocs.datastax.comdocs.docker.comdocs.gap-system.orgdocs.github.comdocs.h5py.orgdocs.lfortran.orgdocs.lib.purdue.edudocs.microsoft.comdocs.modular.comdocs.mongodb.comdocs.mql4.comdocs.neptune.aidocs.nvidia.comdocs.openssl.orgdocs.oracle.comdocs.paramiko.orgdocs.pydantic.devdocs.pytest.orgdocs.python.orgdocs.pytorch.orgdocs.ray.iodocs.rsdocs.scipydocs.scipy.orgdocs.sourcemod.netdocs.sqlalchemy.orgdocs.swanlab.cndocs.sympy.orgdocs.tigergraph.comdocs.ton.orgdocs.typo3.orgdocs.wandb.aidocs.waves.techdocumentation.softwareag.comdocutils.sourceforge.iodogschool.tripod.comdoi.acm.orgdoi.orgdotnet.microsoft.comduelengine.orgdvc.orgdx.doi.orgec-lang.orgeccc.hpi-web.deeclectic.ss.uci.eduelixir-lang.orgelm-lang.orgen.ig.maen.literateprograms.orgen.m.wikipedia.orgen.wikibooks.orgen.wikipedia.orgen.wikiversity.orgencyclopediaofmath.orgendpoint.openai.azure.comendpoints.huggingface.coeprints.ma.man.ac.ukepub.ub.uni-muenchen.deepubs.siam.orgeqworld.ipmnet.ruerrors.pydantic.devessentia.upf.eduexam_ple.comexample-resource.azure.openai.comexslt.orgextempore.moso.com.auezhillang.orgfa.bianp.netfab.cba.mit.edufacebook.github.iofacebookresearch.github.iofactorcode.orgfal.runfarm4.staticflickr.comfennel-lang.orgfilebox.vt.edufiles.pythonhosted.orgfilesystem-spec.readthedocs.iofirebase.google.comfirefox-source-docs.mozilla.orgfishshell.comflax.readthedocs.ioflyte.orgfoo.comformulae.brew.shfortran-lang.orgfoss.heptapod.netfr.wikipedia.orgfreedesktop.orgfreefem.orgfrexx.defsharp.orgfsspec.github.iofunctions.wolfram.comfuthark-lang.orggalton.uchicago.edugcc.gnu.orggcp.gce.instance.hostnamegenshi.edgewall.orggeode.apache.orggeomalgorithms.comgeometer.orggeopandas.orggephi.orggexf.netgiou.stanford.edugist.github.comgit-scm.comgit.kernel.orggit.sr.htgitea.iogithub.comgithub.github.comgitlab-master.nvidia.comgitlab.comgitlab.freedesktop.orggitlab.gnome.orggitter.imgizmojo.orggleam.rungnuplot.infogo.devgolo-lang.orggoo.glgoogle.aip.devgoogle.comgosu-lang.github.iogpuopen.comgraphics.pixar.comgraphics.stanford.edugraphml.graphdrawing.orggraphql.orggroovy-lang.orggroupprops.subwiki.orggroups.google.comgrpc.github.ioguillaumejaume.github.iogum.coh2database.comhal.archives-ouvertes.frhal.inria.frhamberg.nohaml.infohandlebarsjs.comharelang.orghastie.su.domainshaxe.orghbase.apache.orghelp.adobe.comhelp.gooddata.comhelp.openai.comhf.cohg.python.orghips.hearstapps.comhive.apache.orghome.ie.cuhk.edu.hkhome.olemiss.eduhomepages.dcc.ufmg.brhomepages.ecs.vuw.ac.nzhomes.civil.aau.dkhost.comhpccsystems.comhsqldb.orghtml.spec.whatwg.orghttpbin.orghttpd.apache.orghttpwg.orghub-ci.huggingface.cohub.my-company.comhuggingface.cohylang.orghyper.rshypothesis.readthedocs.ioi.postimg.cci.stanford.edui2vgen-xl.github.ioidris2.readthedocs.ioieeexplore.ieee.orgimageio.readthedocs.ioimagen.research.googleimages.cocodataset.orgimages.pexels.comimg.shields.ioimportlib-resources.readthedocs.ioin.mathworks.comindex.docker.ioinf.ufrgs.brinference.api.nscale.cominform-fiction.orginform7.comioke.orgiolanguage.comiopscience.iop.orgipython.orgipython.readthedocs.ioipython.scipy.orgipywidgets.readthedocs.ioisabelle.in.tum.deisocpp.orgitanium-cxx-abi.github.ioiuuk.mff.cuni.czj3-fortran.orgjanet-lang.orgjasmin.sourceforge.netjax.readthedocs.iojeromekelleher.netjfbillingsley.comjgm.github.iojinja.palletsprojects.comjmespath.orgjmlr.csail.mit.edujoblib.readthedocs.iojournals.aps.orgjournals.plos.orgjponnela.comjsoftware.comjson-ld.orgjson-schema.orgjson5.orgjsonlines.orgjsonnet.orgjulialang.orgjupyter-client.readthedocs.orgjuttle.github.iojzgu0buei5.us-east-1.aws.endpoints.huggingface.cloudkconrad.math.uconn.edukeras.iokexue.fmkid-templating.orgkippura.orgkogs-www.informatik.uni-hamburg.dekoka-lang.github.iokotlinlang.orgkubernetes.iolaion.ailara.epfl.chlark-parser.readthedocs.ioleanprover-community.github.iolearn.microsoft.comlesscss.orglh3.googleusercontent.comlib.stat.cmu.edulibrosa.orglibsdl.orglighttpd.netlilypond.orglink.springer.comlinux.die.netlinuxdevcenter.comlips.cs.princeton.edulisp-lang.orglists.llvm.orglists.sourceforge.netlivelovely.comlivescript.netllvm.orgllvmlite.pydata.orgllvmlite.readthedocs.iologtalk.orgluau-lang.orgluschny.delvdmaaten.github.iomacaulay2.commail.python.orgman7.orgmanpages.debian.orgmanual.cytoscape.orgmariadb.orgmarigoldmonodepth.github.iomath.berkeley.edumath.mit.edumath.stackexchange.commath.wvu.edumath24.netmathcs.clarku.edumathforum.orgmathworld.wolfram.commatplotlib.orgmatthewrocklin.commaxdb.sap.commaxima.sourceforge.netmc-stan.orgmcmc-jags.sourceforge.iomechanicalc.commedium.commemcached.orgmersenneforum.orgmesonbuild.commetacpan.orgmicrosoft.comminecraft.wikiminiscript.orgmips.commistralai.github.iomitpress.mit.edumlochbaum.github.iomodular.math.washington.edumoinmo.inmonte.readthedocs.iomoonscript.orgmpmath.orgmpqs.free.frmsdn.microsoft.commsp.orgmy-text-to-image.region.vendor.endpoints.huggingface.cloudmybinder.orgmypy.readthedocs.iomüller.denasm.usnats.ionbformat.readthedocs.orgndjson.orgndownloader.figshare.comnemerle.orgneo4j.comnestedtext.orgnetworkx.lanl.govnetworkx.orgnew-url.comnew.webhook.sitenewspeaklanguage.orgnginx.netnicolas.limare.netnim-lang.orgnineplanets.orgnitlanguage.orgnixos.orgnlp.stanford.edunodejs.orgnotmuchmail.orgnsis.sourceforge.netntrs.nasa.govnumba.pydata.orgnumba.readthedocs.ionumbers.computation.free.frnumexpr.readthedocs.ionumpy.orgnumpydoc.readthedocs.ionusmv.fbk.eunvlpubs.nist.govoai.endpoints.kepler.ai.cloud.ovh.netocaml.orgoeis.orgomoindrot.github.ioonlinelibrary.wiley.comonnxruntime.aiooc-lang.github.ioopalang.orgopenai.comopencobol.add1tocobol.comopenfeature.devopenopt.orgopenproceedings.orgopenreview.netopenscad.orgopensearch.orgopensource.orgopentelemetry.ioopenxla.orgoptuna.readthedocs.ioorgmode.orgosi-model.comother.compackages.msys2.orgpackaging.python.orgpaddle-model-ecology.bj.bcebos.compages.cs.wisc.edupandas.pydata.orgpapers.nips.ccparquet.apache.orgpaste.lisp.orgpastie.caboo.sepaulbourke.netpbs.twimg.compdfs.semanticscholar.orgpdg.lbl.govpendulum.eustace.iopeople.bath.ac.ukpeople.brandeis.edupeople.csail.mit.edupeople.dm.unipi.itpeople.eecs.berkeley.edupeople.math.sfu.capeople.sc.fsu.edupeps.python.orgperldoc.perl.orgpersonal.math.ubc.caphix.x10.mxpi.lacim.uqam.capig.apache.orgpike.lysator.liu.sepillow.readthedocs.iopint.readthedocs.iopip.repos.neuron.amazonaws.compkg.go.devplanetmath.orgplatform.openai.compluggy.readthedocs.ioportal.acm.orgpresbrey.mit.eduprimes.utm.eduproandroiddev.comproceedings.neurips.ccprogramminggeeks.comprojecteuclid.orgprojects.eclipse.orgprojects.scipy.orgprometheus.ioprotobuf.devprql-lang.orgpsysh.orgptls.devpub.ist.ac.atpublic.csusm.edupublic.ukp.informatik.tu-darmstadt.depublicsuffix.orgpugjs.orgpuppet.compushgateway.localpydantic-docs.helpmanual.iopyglet.orgpygments.orgpygraphviz.github.iopyinstaller.readthedocs.iopyo3.rspyos.github.iopyperclip.readthedocs.iopypi.orgpypi.python.orgpypip.inpython-devtools.helpmanual.iopython-lz4.readthedocs.iopython.livinglogic.depython.orgpytorch.orgpyyaml.orgqianwen-res.oss-cn-beijing.aliyuncs.comqlik.comqueue.fal.runqwenlm.github.ior-knott.surrey.ac.ukracket-lang.orgraw.githubusercontent.comreadthedocs.orgreasonml.github.ioredis.ioreference.wolfram.comreferencing.readthedocs.orgrefspecs.linuxfoundation.orgrelaxng.orgreports-archive.adm.cs.cmu.edurequests.readthedocs.ioresearcher.watson.ibm.comresolver.caltech.eduresources.wolframcloud.comrich.readthedocs.ioriverbed.comrob.schapire.netroboconf.github.iorobotframework.orgrosettacode.orgrouter.huggingface.corpm-software-management.github.iorrc.cvc.uab.esrussellfunk.orgrzimmerman.github.ios3.amazonaws.comsafetensors-convert.hf.spacesanssecours.github.iosariyuce.comsass-lang.comsbert.netscalate.fusesource.orgscalate.github.ioschemas.microsoft.comschorn.chscikit-image.orgscikit-learn.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgscipy.orgscrapethis.comseaborn.pydata.orgsel4.systemssemver.orgserverfault.comsetuptools.pypa.ioshenlanguage.orgshex.iosierra.nmsu.edusites.cs.ucsb.eduskarnet.orgskops.readthedocs.ioskyciv.comslim-template.github.ioslsa.devsnowballstem.orgsoliditylang.orgsource.android.comsourceware.orgspec.commonmark.orgspecifications.freedesktop.orgspecifications.openehr.orgspecs.frictionlessdata.iospherelab.aisphinx-gallery.github.iospinroot.comssabook.gforge.inria.frssrg.nicta.com.austackoverflow.comstandards.ieee.orgstat.uw.edustats.stackexchange.comstatweb.stanford.edustorage.googleapis.comsuno-ai.notion.sitesupercollider.github.iosuperuser.comsupport.google.comsupport.sas.comsvnbook.red-bean.comswanlab.cnsympy.orgtact-lang.orgtango.freedesktop.orgteaching.csse.uwa.edu.autechnet.microsoft.comtest.pypi.orgtestanything.orgtestpypi.python.orgtex.stackexchange.comtexfaq.orgthrift.apache.orgthumbs.dreamstime.comtiddlywiki.comtikz.devtimeapi.iotinyurl.comtldp.orgtminka.github.iotodotxt.comtoken.actions.githubusercontent.comtoml.ioton-blockchain.github.iotools.ietf.orgtqdm.github.iotravis-ci.comtravis-ci.orgtreetop.rubyforge.orgtridao.metrino.iotruststore.readthedocs.iottssh2.osdn.jptug.orgtutorial.math.lamar.edutvm.apache.orgtwig.symfony.comtwitter.comtyper.tiangolo.comtyping.python.orgtypst.appu.math.biu.ac.ilunicode-org.github.iounlicense.orgupload.wikimedia.orgurllib3.readthedocs.ious3.php.netuser-images.githubusercontent.comusers.cecs.anu.edu.auusers.cs.dal.causers.iems.northwestern.eduusers.jyu.fiv1-30.docs.kubernetes.iovala.devvalidate-pyproject.readthedocs.iovassarstats.netvelocity.apache.orgverifpal.comvideolectures.netviews.scientific-python.orgvirustotal.github.iovis-www.cs.umass.eduvisualstudio.microsoft.comvlado.fmf.uni-lj.sivuejs.orgvyper.readthedocs.iow3c.github.ioweb.archive.orgweb.cs.elte.huweb.cs.wpi.eduweb.eecs.utk.eduweb.math.princeton.eduweb.mit.eduweb.stanford.eduwebassembly.github.iowebassembly.orgwebhook.sitewebsockets.readthedocs.iowhiley.orgwicg.github.iowiki.archlinux.orgwiki.debian.orgwiki.haskell.orgwiki.osdev.orgwiki.portal.chalmers.sewiki.secondlife.comwiki.ubuntu.comwiki.xxiivv.comwikipedia.orgwixtoolset.orgwowpedia.fandom.comwrapdb.mesonbuild.comwren.iowuecampus2.uni-wuerzburg.dewww-cs-faculty.stanford.eduwww-cs-students.stanford.eduwww-personal.umich.eduwww-sop.inria.frwww.aclweb.orgwww.actian.comwww.adaic.orgwww.adobe.comwww.aiml.informatik.tu-darmstadt.dewww.albmath.orgwww.algorithmic-solutions.infowww.alibabacloud.comwww.almaden.ibm.comwww.alpertron.com.arwww.ams.orgwww.analytictech.comwww.ansys.comwww.antlr.orgwww.apache.orgwww.apfloat.orgwww.apoioinformatica.inf.brwww.archlinux.orgwww.arxiv.orgwww.autohotkey.comwww.autoitscript.comwww.bbcbasic.co.ukwww.bbcode.orgwww.bernoulli.orgwww.bestofmedia.comwww.bramvandersanden.comwww.broadcom.comwww.brynosaurus.comwww.cappuccino.devwww.cecm.sfu.cawww.cheetahtemplate.orgwww.cl.cam.ac.ukwww.cockroachlabs.comwww.colm.netwww.columbia.eduwww.combinatorics.orgwww.comet.comwww.compuphase.comwww.coolmath.comwww.couchbase.comwww.cp.eng.chula.ac.thwww.crmarsh.comwww.cryptol.netwww.cs.cmu.eduwww.cs.cornell.eduwww.cs.hope.eduwww.cs.mcgill.cawww.cs.nyu.eduwww.cs.princeton.eduwww.cs.purdue.eduwww.cs.sfu.cawww.cs.technion.ac.ilwww.cs.toronto.eduwww.cs.ucl.ac.ukwww.cs.umd.eduwww.cs.uu.nlwww.cs.waikato.ac.nzwww.cse.msu.eduwww.csie.ntu.edu.twwww.ctan.orgwww.cybertester.comwww.dartmouth.eduwww.data-publica.comwww.dbs.ifi.lmu.dewww.debian.orgwww.deepmind.comwww.deepspeed.aiwww.devicetree.orgwww.di.ens.frwww.djangoproject.comwww.dms.umontreal.cawww.dtc.umn.eduwww.dvc.orgwww.eclipse.orgwww.ecma-international.orgwww.eecis.udel.eduwww.eecs.tufts.eduwww.eiffel.comwww.elastic.cowww.emba.uvm.eduwww.embarcadero.comwww.erlang.orgwww.euclideanspace.comwww.example.珠宝www.exelisvis.comwww.fantom.orgwww.felix-lang.orgwww.fico.comwww.fim.uni-passau.dewww.firebirdsql.orgwww.fordfoundation.orgwww.forth.comwww.freedesktop.orgwww.fstar-lang.orgwww.gap-system.orgwww.gaussianprocess.orgwww.gexf.netwww.github.comwww.gnu.orgwww.godbole.netwww.godotengine.orgwww.google.comwww.googleapis.comwww.grantjenks.comwww.graphdegeneracy.orgwww.graphviz.orgwww.gutenberg.orgwww.haskell.orgwww.hyperelliptic.orgwww.iana.orgwww.ibm.comwww.ics.uci.eduwww.idris-lang.orgwww.ietf.orgwww.ifp.illinois.eduwww.ilankelman.orgwww.indusoft.comwww.inference.org.ukwww.influxdata.comwww.informatik.uni-augsburg.dewww.instantdb.comwww.intel.comwww.intersystems.comwww.iso.orgwww.itiis.orgwww.itu.intwww.iucnredlist.orgwww.jmlr.orgwww.johndcook.comwww.johnlapeyre.comwww.jpr2718.orgwww.json.orgwww.jstatsoft.orgwww.jstor.orgwww.kernel.orgwww.khronos.orgwww.kxan.comwww.l3harrisgeospatial.comwww.lassosoft.comwww.libarchive.orgwww.logilab.orgwww.lua.orgwww.lulu.comwww.maa.orgwww.makotemplates.orgwww.maplesoft.comwww.mars.comwww.masonhq.comwww.math.colostate.eduwww.math.hmc.eduwww.math.ucsd.eduwww.math.upenn.eduwww.math.usm.eduwww.mathjax.orgwww.mathwave.comwww.mathworks.comwww.mcbe-dev.netwww.mcternan.me.ukwww.mdpi.comwww.media.mit.eduwww.mediawiki.orgwww.merriam-webster.comwww.microsoft.comwww.miketipping.comwww.mit.eduwww.mitpressjournals.orgwww.mlflow.orgwww.mlpack.orgwww.modelica.orgwww.modula2.orgwww.mongodb.comwww.monokai.nlwww.moo.mud.orgwww.mql5.comwww.mrc-bsu.cam.ac.ukwww.mupad.comwww.muppetlabs.comwww.myghty.orgwww.mysql.comwww.nature.comwww.ncbi.nlm.nih.govwww.ncl.ucar.eduwww.neilsloane.comwww.newlisp.orgwww.nordtheme.comwww.numbertheory.orgwww.numberworld.orgwww.oasis-open.orgwww.omg.orgwww.onlamp.comwww.openblas.netwww.openbugs.infowww.opendylan.orgwww.openehr.orgwww.openldap.orgwww.openml.orgwww.openpgp.orgwww.openpolicyagent.orgwww.opm.govwww.oracle.comwww.oreilly.comwww.paddleocr.aiwww.parasail-lang.orgwww.perl.orgwww.php.netwww.picloud.comwww.pnas.orgwww.polyu.edu.hkwww.ponylang.iowww.postgresql.orgwww.povray.orgwww.praat.orgwww.probabilitycourse.comwww.progress.comwww.proofwiki.orgwww.proquest.comwww.pyopenssl.orgwww.python-httpx.orgwww.python.orgwww.r-project.orgwww.radioeng.czwww.raku.orgwww.rebol.comwww.red-bean.comwww.red-lang.orgwww.reed.eduwww.regressive.orgwww.researchgate.netwww.rexxinfo.orgwww.rfc-base.orgwww.rfc-editor.orgwww.rieselprime.dewww.robots.ox.ac.ukwww.ruby-lang.orgwww.rubydoc.infowww.rust-lang.orgwww.santafe.eduwww.santofortunato.netwww.sap.comwww.sarl.iowww.sbert.netwww.scala-lang.orgwww.scheme-reports.orgwww.scielo.brwww.sciencedirect.comwww.scilab.orgwww.scipy.orgwww.scivision.devwww.smalltalk.orgwww.smarty.netwww.sparknotes.comwww.sphinx-doc.orgwww.spicelang.comwww.springer.comwww.sqlite.orgwww.squid-cache.orgwww.sri.comwww.stat.berkeley.eduwww.stat.rice.eduwww.stata.comwww.statemaster.comwww.stats.ox.ac.ukwww.statsmodels.orgwww.stixfonts.orgwww.swift.orgwww.swig.orgwww.sylabs.iowww.sympy.orgwww.systutorials.comwww.tads.orgwww.tandfonline.comwww.tcl.tkwww.tcsh.orgwww.tencentcloud.comwww.tensorflow.orgwww.teradata.comwww.terraform.iowww.textualize.iowww.thermoscientific.comwww.thingsdb.netwww.tsql.infowww.typescriptlang.orgwww.unicode.orgwww.unicon.orgwww.utstat.toronto.eduwww.value-at-risk.netwww.varnish-software.comwww.vim.orgwww.visual-prolog.comwww.vitanuova.comwww.w3.orgwww.wandb.comwww.wavemetrics.comwww.whatsmyua.infowww.win.tue.nlwww.wolfram.comwww.workwithcolor.comwww.wou.eduwww.x.orgwww.xact.eswww.xudongz.comwww.xyz.eduwww.yhat.comwww.yworks.comwww.zeek.orgwww.ziglang.orgwww2.asanet.orgwww2.cs.arizona.eduwww3.risc.jku.atwwwmaths.anu.edu.aux.comx10-lang.orgxarray.pydata.orgxlrd.readthedocs.ioxn--fiqs8s.icom.museumxy-pic.sourceforge.netyahoo.comyaml.orgyann.lecun.comzephir-lang.comziglang.org

</> First-Party Code

first-party (rust): router

rust first-party
medium telemetry production #1bce997e10773b5e — Telemetry/analytics SDK call. This crate transmits usage or event data to a third-party service.
repo/router/src/logging.rs:95 
                opentelemetry_otlp::new_exporter()

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 63 low-confidence finding(s)
low env_fs production #777e88dcc286b01e — Environment-variable access.
repo/router/build.rs:13 
        if let Ok(sha) = std::env::var("GIT_SHA") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75ad637dc996a7c6 — Environment-variable access.
repo/router/build.rs:20 
    if let Ok(label) = std::env::var("DOCKER_LABEL") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #07aef3028b5c4c84 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/chat.rs:192 
                tracing::info!("Current text {:?}", self.text);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #dcea86f5b4441cf0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/infer/chat_template.rs:58 
        tracing::debug!("Loading template: {}", template_str);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #c474b863593d3402 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/infer/chat_template.rs:69 
        tracing::debug!("Use default tool template: {}", use_default_tool_template);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #5d5919e959ad7d4d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/infer/mod.rs:118 
                tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #edef2fbbca3e7097 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/infer/mod.rs:126 
            tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #c97a5ceaf40511cf — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/infer/mod.rs:217 
                tracing::error!("Tokenization {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #39bede18ab69a122 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/infer/mod.rs:238 
                tracing::error!("{e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #8489b5e0ec58e872 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/infer/mod.rs:314 
            tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #98becfbb4c562fc5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/lib.rs:61 
        tracing::info!("Loaded a python tokenizer");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #31f5ad674dac667e — Filesystem access.
repo/router/src/lib.rs:149 
        std::fs::read_to_string(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18c24ef6a681c228 — Filesystem access.
repo/router/src/lib.rs:187 
        let content = std::fs::read_to_string(filename).ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95ed865a3b354cef — Filesystem access.
repo/router/src/lib.rs:219 
        std::fs::read_to_string(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #903d5d1007ce588a — Environment-variable access.
repo/router/src/logging.rs:76 
    let ansi = std::env::var("LOG_COLORIZE") != Ok("1".to_string());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f72b88c9b932ba3 — Environment-variable access.
repo/router/src/logging.rs:117 
    let env_filter = if let Ok(log_level) = std::env::var(varname) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #f585a074c42dcee0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:299 
    tracing::debug!(
        "Input: {}",
        &req.inputs.chars().take(1000).collect::<String>()
    );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #70a592bf638f368e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:431 
    tracing::debug!("Output: {}", output_text);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #e3317b4d237fd3f0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:432 
    tracing::info!("Success");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #ce63898bf04ee10c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:520 
    tracing::debug!("Input: {}", req.inputs);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #74eb5c6593f4c348 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:902 
                            tracing::error!("Failed to send event. Receiver dropped.");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #16ad8308bc9a0f42 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:920 
                tracing::error!("Failed to get headers: {:?}", e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #cafb668afd6292dc — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1189 
    tracing::debug!("Got chat_template {:?}", infer.chat_template);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #23afccb41362fc19 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1464 
    tracing::warn!("Odd tokenizer detected, falling back on legacy tokenization");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #951262db63f56faa — Filesystem access.
repo/router/src/server.rs:1473 
        std::fs::read_to_string(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #352bfa14f4a6505f — Environment-variable access.
repo/router/src/server.rs:1541 
    let authorization_token = std::env::var("HF_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58790bdff683a8e4 — Environment-variable access.
repo/router/src/server.rs:1542 
        .or_else(|_| std::env::var("HUGGING_FACE_HUB_TOKEN"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4121e7d346fd2c7e — Environment-variable access.
repo/router/src/server.rs:1556 
        if let Ok(cache_dir) = std::env::var("HUGGINGFACE_HUB_CACHE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da1a881ce1d6b10e — Environment-variable access.
repo/router/src/server.rs:1560 
        if let Ok(origin) = std::env::var("HF_HUB_USER_AGENT_ORIGIN") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c570f52ca138cd1a — Environment-variable access.
repo/router/src/server.rs:1578 
        if std::env::var("HF_HUB_OFFLINE") == Ok("1".to_string()) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c54e9c8e55563860 — Environment-variable access.
repo/router/src/server.rs:1579 
            let cache = std::env::var("HUGGINGFACE_HUB_CACHE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #8c4ada7e1ca20ec0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1583 
            tracing::warn!("Offline mode active using cache defaults");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #f643ddf53e40e774 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1586 
            tracing::info!("Using the Hugging Face API");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #53d285f880f64c03 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1590 
                    tracing::warn!("Unable to build the Hugging Face API");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #4919fb4bcc668e6c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1632 
                tracing::warn!("Could not retrieve model info from the Hugging Face hub.");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #e3dc9494010790d9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1645 
            tracing::info!("Cache {cache:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #22d20faa7d39f733 — Filesystem access.
repo/router/src/server.rs:1664 
        .and_then(|f| std::fs::read_to_string(f).ok())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #288fe8d5b3b7e906 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1668 
                tracing::warn!("Could not parse chat template {e:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #1a6f739befdeab5c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1674 
    tracing::warn!("Tokenizer_config {tokenizer_config_path:?} - {tokenizer_config_filename:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #5a57fc040b37b5af — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1682 
        tracing::warn!("Could not find tokenizer config locally and no API specified");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #bf215ff17b94e0db — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1687 
        tracing::info!("Using chat template from chat_template.json");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #f5df04dff67a266d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1698 
            tracing::error!("Failed to import python tokenizer {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #b2509f9121c13249 — Filesystem access.
repo/router/src/server.rs:1718 
        std::fs::read_to_string(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #1b3c37c908203996 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1724 
                    tracing::warn!("Could not parse config {err:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #becb827824df3ad9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1742 
    tracing::info!("Using config {config:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #ecb17313fd2aecd9 — Environment-variable access.
repo/router/src/server.rs:1747 
    let origin = std::env::var("HF_HUB_USER_AGENT_ORIGIN").ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #5d1ba1ddfc7733a5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1802 
            tracing::warn!("no pipeline tag found for model {tokenizer_name}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #5202493ecb3d8ec9 — Environment-variable access.
repo/router/src/server.rs:1899 
        std::env::var("AIP_HTTP_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #6143740158c23782 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:1909 
            tracing::warn!("Invalid hostname, defaulting to 0.0.0.0");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #0e42c505dbe3cd74 — Environment-variable access.
repo/router/src/server.rs:2247 
        ComputeType(std::env::var("COMPUTE_TYPE").unwrap_or("gpu+optimized".to_string()));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #ef8e16ca48ef2fc0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:2257 
        tracing::info!("Built with `google` feature");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #bad51cfc76973547 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:2258 
        tracing::info!(
            "Environment variables `AIP_PREDICT_ROUTE` and `AIP_HEALTH_ROUTE` will be respected."
        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #7f283aed3e272f22 — Environment-variable access.
repo/router/src/server.rs:2261 
        if let Ok(env_predict_route) = std::env::var("AIP_PREDICT_ROUTE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29adf1a951abbc68 — Environment-variable access.
repo/router/src/server.rs:2264 
        if let Ok(env_health_route) = std::env::var("AIP_HEALTH_ROUTE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #091edc29422f85bd — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:2271 
        tracing::info!("Built with `kserve` feature");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #3cb4b9dcda02368c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:2302 
    tracing::info!("Connected");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #752b67d143dc8498 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:2325 
                tracing::error!("Failed to bind to {addr}: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #47ddaf90dd1f0d35 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:2345 
            tracing::info!(
                "Serving revision {sha} of model {}",
                hub_model_info.model_id
            );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #4d3381965b88ca25 — Filesystem access.
repo/router/src/server.rs:2361 
    let file = File::open(tokenizer_config_filename).ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #c6888cc44cb3863d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:2367 
            tracing::warn!("Unable to parse tokenizer config: {}", e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #8d45cc67d3c4a0c3 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/router/src/server.rs:2399 
    tracing::info!("signal received, starting graceful shutdown");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low egress production #216260a7474758aa — Hardcoded external endpoint. Review what data is sent to this destination.
repo/router/src/usage_stats.rs:70 
        let _ = client
            .post(TELEMETRY_URL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0b83d69e915c2a0e — Filesystem access.
repo/router/src/usage_stats.rs:405 
    let file = File::open(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (rust): backends/client

rust first-party
expand_more 2 low-confidence finding(s)
low telemetry production #5d4dfaa560c0e341 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/client/src/lib.rs:46 
        tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #4e29653ad4b14689 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/client/src/lib.rs:54 
        tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

first-party (rust): backends/llamacpp

rust first-party
expand_more 4 low-confidence finding(s)
low env_fs production #3b3c2286d7e551b4 — Environment-variable access.
repo/backends/llamacpp/build.rs:45 
    let out_path = PathBuf::from(env::var("OUT_DIR").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dec9660c464b4710 — Environment-variable access.
repo/backends/llamacpp/src/main.rs:215 
        if let Ok(cache_dir) = std::env::var("HUGGINGFACE_HUB_CACHE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #478274789ba9e28a — Environment-variable access.
repo/backends/llamacpp/src/main.rs:218 
        if let Ok(token) = std::env::var("HF_TOKEN") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bbee681101c50db — Environment-variable access.
repo/backends/llamacpp/src/main.rs:221 
        if let Ok(origin) = std::env::var("HF_HUB_USER_AGENT_ORIGIN") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (rust): backends/trtllm

rust first-party
expand_more 16 low-confidence finding(s)
low env_fs production #9ab30a6935ea13cb — Environment-variable access.
repo/backends/trtllm/build.rs:57 
    let os = env::var("CARGO_CFG_TARGET_OS").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd57cd732a27b0a1 — Environment-variable access.
repo/backends/trtllm/build.rs:58 
    let arch = env::var("CARGO_CFG_TARGET_ARCH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7033618c1d637aa5 — Environment-variable access.
repo/backends/trtllm/build.rs:59 
    let env = env::var("CARGO_CFG_TARGET_ENV").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6744cabb5099f9c0 — Environment-variable access.
repo/backends/trtllm/build.rs:208 
    let out_dir = PathBuf::from(env::var("OUT_DIR").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3422855297f67ab8 — Environment-variable access.
repo/backends/trtllm/build.rs:209 
    let build_profile = env::var("PROFILE").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fe5bdcd03b2179b — Environment-variable access.
repo/backends/trtllm/src/main.rs:76 
    let authorization_token = std::env::var("HF_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36057f8883f5f345 — Environment-variable access.
repo/backends/trtllm/src/main.rs:77 
        .or_else(|_| std::env::var("HUGGING_FACE_HUB_TOKEN"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fed0d463fff8952 — Environment-variable access.
repo/backends/trtllm/src/main.rs:89 
        if let Ok(cache_dir) = std::env::var("HUGGINGFACE_HUB_CACHE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #606ac6021c69e2a0 — Environment-variable access.
repo/backends/trtllm/src/main.rs:93 
        if let Ok(origin) = std::env::var("HF_HUB_USER_AGENT_ORIGIN") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bbe4cfc138d985f — Environment-variable access.
repo/backends/trtllm/src/main.rs:111 
        if std::env::var("HF_HUB_OFFLINE") == Ok("1".to_string()) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f91fb46792b03f1 — Environment-variable access.
repo/backends/trtllm/src/main.rs:112 
            let cache = std::env::var("HUGGINGFACE_HUB_CACHE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #acb599094fbe4b72 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/trtllm/src/main.rs:116 
            tracing::warn!("Offline mode active using cache defaults");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #aad2b1988b726657 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/trtllm/src/main.rs:119 
            tracing::info!("Using the Hugging Face API");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #670fda30ed9692a1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/trtllm/src/main.rs:123 
                    tracing::warn!("Unable to build the Hugging Face API");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #e9e48a46febbab7b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/trtllm/src/main.rs:162 
                tracing::warn!("Could not retrieve model info from the Hugging Face hub.");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #aceca0eab243f092 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/trtllm/src/main.rs:196 
            tracing::error!("Failed to import python tokenizer {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

first-party (rust): backends/v2

rust first-party
expand_more 18 low-confidence finding(s)
low env_fs production #300e9ce5294fc0a1 — Environment-variable access.
repo/backends/v2/src/backend.rs:39 
        let attention = std::env::var("ATTENTION").unwrap_or("paged".to_string());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #64755804fe505e07 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/backend.rs:376 
            tracing::error!("Entry response channel error.");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #0774997c14eb7071 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/backend.rs:484 
        tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #58e34d100eedcda8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/client/mod.rs:53 
        tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #e84cee427c7f2880 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/client/mod.rs:61 
        tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #1ef79309235ebaf4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/lib.rs:50 
                tracing::warn!("Model does not support automatic max batch total tokens");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #53c1f81706aa97b4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/lib.rs:57 
                    tracing::warn!(
                        "`--max-batch-total-tokens` is deprecated for Flash \
                        Attention models."
                    );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #000a432264385725 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/lib.rs:61 
                    tracing::warn!(
                        "Inferred max batch total tokens: {max_supported_batch_total_tokens}"
                    );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #4b7eb1f4ececb267 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/lib.rs:88 
    tracing::info!("Warming up model");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #82a39e762bf1d199 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/lib.rs:100 
    tracing::info!("Setting max batch total tokens to {max_batch_total_tokens}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #5106aa525c231518 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/lib.rs:124 
    tracing::info!("Using backend V3");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #d6d2f55799163c87 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/queue.rs:196 
            tracing::debug!("No queue");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #fe6a1c7186291f73 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/queue.rs:203 
                tracing::debug!("Not enough entries");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #82bb11b5c754fda8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/queue.rs:210 
                tracing::debug!("No capacity");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #336b2a597fc1b993 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/queue.rs:236 
                tracing::debug!("Dropping entry");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #6c14c17f15612fb6 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/queue.rs:271 
                tracing::debug!("Over budget: prefill_tokens={prefill_tokens} > {prefill_token_budget} || {prefill_tokens} + {decode_tokens} + {} > {token_budget}", self.speculate);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #72edf806af2be2d4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/queue.rs:276 
            tracing::debug!("Accepting entry");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #6300ce4ed32a44e9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v2/src/queue.rs:311 
            tracing::debug!("Filtered out all entries");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

first-party (rust): backends/v3

rust first-party
expand_more 30 low-confidence finding(s)
low telemetry production #5093d748ae5800a9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/backend.rs:39 
            tracing::warn!("Model supports prefill chunking. `waiting_served_ratio` and `max_waiting_tokens` will be ignored.");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #d875b1385b79aeba — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/backend.rs:438 
            tracing::error!("Entry response channel error.");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #9d86747631c3851c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/backend.rs:546 
        tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #4990e03e4efb55f1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/client/mod.rs:45 
        tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #bbdc022ce6ca1280 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/client/mod.rs:53 
        tracing::error!("{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #924d08a2280bc752 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/lib.rs:79 
                tracing::warn!("Model does not support automatic max batch total tokens");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #c0246149dc555c8d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/lib.rs:90 
                    tracing::warn!(
                        "`--max-batch-total-tokens` is deprecated for Flash \
                        Attention models."
                    );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #f962f92c2230a8be — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/lib.rs:94 
                    tracing::warn!(
                        "Inferred max batch total tokens: {max_supported_batch_total_tokens}"
                    );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #14fb849e51ec5f45 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/lib.rs:125 
    tracing::info!("Warming up model");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #5efb909247542af5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/lib.rs:137 
    tracing::info!("Setting max batch total tokens to {max_batch_total_tokens}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #1cd932d934668a27 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/lib.rs:166 
    tracing::info!("Using backend V3");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #a63c258bca91e780 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/main.rs:168 
        tracing::info!(
            "Maximum input tokens defaulted to {}",
            backend_info.max_input_tokens
        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #2cb898f50a43f3ea — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/main.rs:174 
        tracing::info!(
            "Maximum total tokens defaulted to {}",
            backend_info.max_total_tokens
        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #3e6172bebe8ab172 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/queue.rs:245 
            tracing::debug!("No queue");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #3dd2ae2aa0534a5b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/queue.rs:252 
                tracing::debug!("Not enough entries");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #6f1d0af962578cea — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/queue.rs:259 
                tracing::debug!("No capacity");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #37971280cb6e9000 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/queue.rs:283 
                tracing::debug!("Dropping entry");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #a1a84ebdc0ffc9a1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/queue.rs:300 
                        tracing::debug!("Over budget: prefill_tokens={prefill_tokens} > {prefill_token_budget} || {prefill_tokens} + {decode_tokens} + {} > {token_budget}", self.speculate);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #252bd1d4dbf06f84 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/queue.rs:325 
                            tracing::debug!("Over budget: not enough free blocks");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #50eb1c8ca7b39388 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/queue.rs:359 
                            tracing::debug!(
                                "Matched budget: prefill_tokens={} == {prefill_token_budget}",
                                prefill_tokens + postfix_len
                            );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #d481c7251a1abfad — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/queue.rs:367 
                            tracing::debug!(
                                "Over budget: prefill_tokens={} > {prefill_token_budget}",
                                prefill_tokens + postfix_len
                            );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #c94f99d7b43d92f6 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/queue.rs:385 
                            tracing::debug!("Over budget: prefill_tokens={actual_prefill_tokens_for_hpu} > {prefill_token_budget}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #057ae86a226ebbb3 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/queue.rs:404 
            tracing::debug!("Filterered out all entries");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #0bf9c0ca206931fd — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/radix.rs:59 
            tracing::debug!(
                "Free blocks {}  need {n_blocks_needed}",
                self.free_blocks.len()
            );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #43e6a66a65c1de5d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/radix.rs:108 
        tracing::info!("Prefix {prefix_len} - Suffix {suffix_len}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #2386879e031dd1d2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/radix.rs:113 
                tracing::debug!("Cannot allocate {:?}", self.cache_blocks);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #b5bd6bf48fd06260 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/radix.rs:114 
                tracing::debug!("Found {prefix_len} prefix tokens need {suffix_blocks} suffix blocks for {tokens} tokens");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #ecb2686afca6c9f5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/radix.rs:115 
                tracing::debug!("Block size {}", self.block_size);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #37cfed22c4ef6679 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/radix.rs:372 
        tracing::debug!("Evicting in search of {n_blocks}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #958c284f9189a5db — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/backends/v3/src/radix.rs:376 
            tracing::debug!("Evicting node {node_id:?} ");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

first-party (rust): benchmark

rust first-party
expand_more 8 low-confidence finding(s)
low telemetry test-only Excluded from app score #a50e85c427c2b0c7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/benchmark/src/main.rs:138 
    tracing::info!("Loading tokenizer");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry test-only Excluded from app score #7e963b79550d8cae — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/benchmark/src/main.rs:144 
            tracing::info!("Found local tokenizer");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry test-only Excluded from app score #29f6695678333b11 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/benchmark/src/main.rs:147 
            tracing::info!("Downloading tokenizer");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs test-only Excluded from app score #20a0731e4cb06bef — Environment-variable access.
repo/benchmark/src/main.rs:150 
            let token = std::env::var("HF_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0a2442502cc39e88 — Environment-variable access.
repo/benchmark/src/main.rs:151 
                .or_else(|_| std::env::var("HUGGING_FACE_HUB_TOKEN"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry test-only Excluded from app score #7e0663ddf30a1dad — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/benchmark/src/main.rs:163 
    tracing::info!("Tokenizer loaded");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry test-only Excluded from app score #f38943f3705e4cdf — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/benchmark/src/main.rs:172 
            tracing::info!("Connect to model server");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry test-only Excluded from app score #f8b54c33a23533fa — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/benchmark/src/main.rs:182 
            tracing::info!("Connected");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

first-party (rust): launcher

rust first-party
expand_more 80 low-confidence finding(s)
low env_fs production #663fefa72fb70511 — Environment-variable access.
repo/launcher/build.rs:16 
        if let Ok(sha) = std::env::var("GIT_SHA") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a1af9387d63e057 — Environment-variable access.
repo/launcher/build.rs:23 
    if let Ok(label) = std::env::var("DOCKER_LABEL") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #730dcad43bd597c8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/gpu.rs:12 
            tracing::warn!("Ignoring negative GPU compute capabilities: {major}.{minor}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #7d6d72aff8b2eee7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/gpu.rs:17 
            tracing::warn!("Cannot determine GPU compute capability: {}", err);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #706638184d46c232 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:33 
    tracing::debug!(
        "Max compute {} model compute {}",
        human_size(f16_max_compute as usize, "flop"),
        human_size(model_compute as usize, "flop")
    );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #0d500b843da71b83 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:74 
        tracing::debug!(
            "Available vram {}: model needs {}, every tokens requires {}, maximum allocatable tokens {tokens_allowed}",
            human_size(available, "B"),
            human_size(model, "B"),
            human_size(token_vram, "B"),
        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #407e4572cad51a95 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:82 
        tracing::warn!(
            "Not enough VRAM to run the model: Available: {} - Model {}.",
            human_size(available, "B"),
            human_size(model, "B")
        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #9565b4e79c34f7e3 — Environment-variable access.
repo/launcher/src/main.rs:101 
        if let Ok(token) = std::env::var("HF_TOKEN") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41fcee66c0881fdc — Environment-variable access.
repo/launcher/src/main.rs:105 
        if let Ok(origin) = env::var("HF_HUB_USER_AGENT_ORIGIN") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca4a1b8782399b6a — Filesystem access.
repo/launcher/src/main.rs:124 
    let content = std::fs::read_to_string(filename)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e863bfbfe6a24d7 — Environment-variable access.
repo/launcher/src/main.rs:133 
    let mut prefix_caching: Option<String> = std::env::var("PREFIX_CACHING").ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38f1e570925581c6 — Environment-variable access.
repo/launcher/src/main.rs:134 
    let mut attention: Option<String> = std::env::var("ATTENTION").ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #26c2b56328d04d20 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:138 
                tracing::info!("Disabling prefix caching because of VLM model");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #8d024d78e95631cf — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:141 
                tracing::info!("Disabling prefix caching because of seq2seq model");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #261a30fab2598733 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:157 
                    tracing::info!("Disabling prefix caching because of lora adapters");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #603151a4c2539cec — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:165 
                            tracing::info!(
                                "Forcing attention to '{fallback_attention}' because model {} requires it",
                                config.model_type.as_ref().unwrap()
                            );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #0981890e903e3973 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:172 
                            tracing::info!("Disabling prefix caching because it is not supported with 'paged' attention");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #18a96be0ba10fb3c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:182 
                    tracing::info!("Forcing attention to '{fallback_attention}' because head dim is not supported by flashinfer, also disabling prefix caching");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #6e22b5fda18f4fb4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:192 
        tracing::info!("Disabling prefix caching on paged attention");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #3b7fdc73ab934c7d — Environment-variable access.
repo/launcher/src/main.rs:1065 
    let enable_hf_transfer = env::var("HF_HUB_ENABLE_HF_TRANSFER").unwrap_or("1".to_string());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e822c9bd5af96884 — Environment-variable access.
repo/launcher/src/main.rs:1072 
    if let Ok(api_token) = env::var("HF_API_TOKEN") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #177d1dcdb3777088 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1149 
    tracing::info!("Starting shard");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #c55e1f9aed69aae8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1163 
                tracing::error!("text-generation-server not found in PATH");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #872a5b09e3a6094f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1164 
                tracing::error!("Please install it with `make install-server`")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #dd59dd46b66626f0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1167 
                tracing::error!("{}", err);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #746f80bdfea39441 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1217 
            tracing::error!("Shard complete standard error output:\n{err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #82b1bde20996e55f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1220 
                tracing::error!("Shard process was signaled to shutdown with signal {signal}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #55db9bebc45d62df — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1240 
            tracing::info!("Shard ready in {:?}", start_time.elapsed());

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #4a058b6161018a53 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1244 
            tracing::info!("Waiting for shard to be ready...");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #625d6f6d0c4855a5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1252 
    tracing::info!("Shutting down shards");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #512050819fcd0b9b — Environment-variable access.
repo/launcher/src/main.rs:1263 
    let devices = match env::var("CUDA_VISIBLE_DEVICES") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #360d08f1dc82a9ce — Environment-variable access.
repo/launcher/src/main.rs:1265 
        Err(_) => match env::var("NVIDIA_VISIBLE_DEVICES") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bee4236b66353a58 — Environment-variable access.
repo/launcher/src/main.rs:1287 
            Err(_) => env::var("ZE_AFFINITY_MASK").ok()?,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #fd802d00fea5fcd9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1326 
            PythonLogLevelEnum::Debug => tracing::debug!("{}", self.text.trim_end()),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #68cf6ddc3bab3472 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1327 
            PythonLogLevelEnum::Info => tracing::info!("{}", self.text.trim_end()),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #f4bf03b979ba56b8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1328 
            PythonLogLevelEnum::Success => tracing::info!("{}", self.text.trim_end()),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #a4ef94a0c1eb0195 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1329 
            PythonLogLevelEnum::Warning => tracing::warn!("{}", self.text.trim_end()),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #e4a2e278b19221fe — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1330 
            PythonLogLevelEnum::Error => tracing::error!("{}", self.text.trim_end()),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #981dffa65b26ea78 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1331 
            PythonLogLevelEnum::Critical => tracing::error!("{}", self.text.trim_end()),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #f699353bad642ce7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1382 
            tracing::info!("Parsing num_shard from CUDA_VISIBLE_DEVICES/NVIDIA_VISIBLE_DEVICES/ZE_AFFINITY_MASK");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #3ff115050fa0ff2b — Environment-variable access.
repo/launcher/src/main.rs:1487 
    let enable_hf_transfer = env::var("HF_HUB_ENABLE_HF_TRANSFER").unwrap_or("1".to_string());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7958e089ecf4d12 — Environment-variable access.
repo/launcher/src/main.rs:1494 
    if let Ok(api_token) = env::var("HF_API_TOKEN") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #0d04e0f6a66ad1bb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1508 
    tracing::info!("Starting check and download process for {model_id}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #ac757f0624958ecc — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1521 
                tracing::error!("text-generation-server not found in PATH");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #ee9dd53f9b59bb18 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1522 
                tracing::error!("Please install it with `make install-server`")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #0bb1a0d1c32c941d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1524 
                tracing::error!("{}", err);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #919e90a5de66d49d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1550 
                tracing::info!("Successfully downloaded weights for {model_id}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #5967d16d073ccfaa — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1560 
                tracing::error!(
                    "Download process was signaled to shutdown with signal {signal}: {err}"
                );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #c0a48cd0f08c8953 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1564 
                tracing::error!("Download encountered an error: {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #d90084167e5574c3 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1677 
                tracing::error!("Shard {rank} failed to start");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #90c9145abd72a3d8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1682 
                tracing::error!("Shard status channel disconnected");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #e0443dfd51c6f3ae — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1780 
                tracing::warn!("Unkown compute for card {card}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #3c07a4954a97c8b6 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1798 
            tracing::warn!("Unexpected memory unit {unit}, expected MiB");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #de92ab3a12d5e591 — Environment-variable access.
repo/launcher/src/main.rs:1803 
        let wiggle_room: f32 = env::var("TGI_WIGGLE_ROOM")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #565a52d8b921f9f6 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1842 
    tracing::info!("Starting Webserver");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #f62d27d542ce1498 — Environment-variable access.
repo/launcher/src/main.rs:1964 
    if let Ok(api_token) = env::var("HF_API_TOKEN") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #605cba7f22bfcea4 — Environment-variable access.
repo/launcher/src/main.rs:1969 
    if let Ok(compute_type) = env::var("COMPUTE_TYPE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #d8071ec93e19adc1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1985 
            tracing::error!("Failed to start webserver: {}", err);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #1f52f4311be44f3b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1987 
                tracing::error!("text-generation-router not found in PATH");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #215ddb42a55df073 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1988 
                tracing::error!("Please install it with `make install-router`")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #4af3198823ed0206 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:1990 
                tracing::error!("{}", err);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #9f8cb29ec033a665 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2016 
    tracing::info!("Terminating {process_name}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #823cc7be6a6de551 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2021 
    tracing::info!("Waiting for {process_name} to gracefully shutdown");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #409d26e8b7133044 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2024 
            tracing::info!("{process_name} terminated");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #b5b9982907032440 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2029 
    tracing::info!("Killing {process_name}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #254fdf415fc319bd — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2034 
    tracing::info!("{process_name} killed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs production #a71965163e342f97 — Environment-variable access.
repo/launcher/src/main.rs:2046 
    let env_filter = if let Ok(log_level) = std::env::var(varname) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry production #eec6d1738097bff1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2076 
        tracing::info!("{}", env_runtime);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #31632eca38270e2c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2079 
    tracing::info!("{:#?}", args);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #15930ee49867a6ac — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2086 
    tracing::info!("Using attention {attention} - Prefix caching {prefix_caching}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #b3104bcc31ac8bd2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2097 
        tracing::info!("Sharding model on {num_shard} processes");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #1eee94ae8c831d78 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2144 
                        tracing::warn!("Reducing the max batch prefill from {default} to {vram_maximum} because there is not enough VRAM to support it.");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #77ba73142a2a9374 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2150 
                tracing::info!("Default `max_batch_prefill_tokens` to {value}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #f05a6527a7dfbb30 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2166 
        tracing::warn!("Bitsandbytes is deprecated, use `eetq` instead, which provides better latencies overall and is drop-in in most cases.");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #dba5b20cdda70480 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2173 
            tracing::warn!("Bitsandbytes doesn't work with cuda graphs, deactivating them");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #3ee20773f6056ce8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2177 
            tracing::warn!("Exl2 doesn't work with cuda graphs, deactivating them");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #dba8914688c2e205 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2182 
            tracing::info!("Using default cuda graphs {cuda_graphs:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #3782732e4c9a331a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2193 
        tracing::warn!(
            "`trust_remote_code` is set. Trusting that model `{}` do not contain malicious code.",
            args.model_id
        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #53d5becd3db2c12f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2335 
            tracing::error!("Shard {rank} crashed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry production #e5c55e7196654639 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
repo/launcher/src/main.rs:2342 
                tracing::error!("Webserver Crashed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

</> Dependencies

init-tracing-opentelemetry

rust dependency
medium telemetry dependency Excluded from app score #79d1fbd43e2a2dbe — Telemetry/analytics SDK call. This crate transmits usage or event data to a third-party service.
pkgs/rust/[email protected]/src/otlp.rs:28 
        "http/protobuf" => opentelemetry_otlp::new_exporter()

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #1147610b90e0ac9b — Telemetry/analytics SDK call. This crate transmits usage or event data to a third-party service.
pkgs/rust/[email protected]/src/otlp.rs:33 
        "grpc/tls" => opentelemetry_otlp::new_exporter()

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #50a9a622f323b8f8 — Telemetry/analytics SDK call. This crate transmits usage or event data to a third-party service.
pkgs/rust/[email protected]/src/otlp.rs:38 
        _ => opentelemetry_otlp::new_exporter()

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 18 low-confidence finding(s)
low env_fs dependency Excluded from app score #d2fddf883c28f4a6 — Environment-variable access.
pkgs/rust/[email protected]/src/lib.rs:49 
        std::env::var("OTEL_PROPAGATORS").unwrap_or_else(|_| "tracecontext,baggage".to_string());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #4defe4e7c0238f9f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/lib.rs:63 
        tracing::debug!(target: "otel::setup", OTEL_PROPAGATORS = propagators_name.join(","));

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #fac5a347820d551f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/otlp.rs:25 
    tracing::debug!(target: "otel::setup", OTEL_EXPORTER_OTLP_TRACES_ENDPOINT = endpoint);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #316d58e64e567b86 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/otlp.rs:26 
    tracing::debug!(target: "otel::setup", OTEL_EXPORTER_OTLP_TRACES_PROTOCOL = protocol);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #e1deda092b4637f8 — Environment-variable access.
pkgs/rust/[email protected]/src/otlp.rs:57 
    let maybe_endpoint = std::env::var("OTEL_EXPORTER_OTLP_TRACES_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22fa4ce5c32f04b2 — Environment-variable access.
pkgs/rust/[email protected]/src/otlp.rs:58 
        .or_else(|_| std::env::var("OTEL_EXPORTER_OTLP_ENDPOINT"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb891c3b17238b95 — Environment-variable access.
pkgs/rust/[email protected]/src/otlp.rs:60 
    let maybe_protocol = std::env::var("OTEL_EXPORTER_OTLP_TRACES_PROTOCOL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a3ea494903e0ece — Environment-variable access.
pkgs/rust/[email protected]/src/otlp.rs:61 
        .or_else(|_| std::env::var("OTEL_EXPORTER_OTLP_PROTOCOL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5829cd408d6f508d — Environment-variable access.
pkgs/rust/[email protected]/src/otlp.rs:69 
    let mut name = std::env::var("OTEL_TRACES_SAMPLER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #f6cea42392b40434 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/otlp.rs:89 
    tracing::debug!(target: "otel::setup", OTEL_TRACES_SAMPLER = ?name);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #96ac9c5abefa1aa0 — Environment-variable access.
pkgs/rust/[email protected]/src/otlp.rs:98 
    let v = std::env::var("OTEL_TRACES_SAMPLER_ARG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #3e5bdb9ed14cf8a5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/otlp.rs:100 
    tracing::debug!(target: "otel::setup", OTEL_TRACES_SAMPLER_ARG = ?v);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #1f7c8f73221dd8bf — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/resource.rs:66 
        |kv| tracing::debug!(target: "otel::setup::resource", key = %kv.0, value = %kv.1),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #1909c45e732747eb — Environment-variable access.
pkgs/rust/[email protected]/src/resource.rs:78 
        let service_name = std::env::var("OTEL_SERVICE_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75920091af44cc73 — Environment-variable access.
pkgs/rust/[email protected]/src/resource.rs:79 
            .or_else(|_| std::env::var("SERVICE_NAME"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45079cfe28838079 — Environment-variable access.
pkgs/rust/[email protected]/src/resource.rs:80 
            .or_else(|_| std::env::var("APP_NAME"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c09c5f98336b16e — Environment-variable access.
pkgs/rust/[email protected]/src/resource.rs:87 
        let service_version = std::env::var("SERVICE_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41955b76bcb73882 — Environment-variable access.
pkgs/rust/[email protected]/src/resource.rs:88 
            .or_else(|_| std::env::var("APP_VERSION"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tracing-opentelemetry

rust dependency
medium telemetry tooling Excluded from app score unreachable #f99facff27c46429 — Telemetry/analytics SDK call. This crate transmits usage or event data to a third-party service.
pkgs/rust/[email protected]/examples/opentelemetry-otlp.rs:110 
        .with_exporter(opentelemetry_otlp::new_exporter().tonic())

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 14 low-confidence finding(s)
low telemetry dependency Excluded from app score #1c1b3e3519f8bf7b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/metrics.rs:14 
                tracing::info!(key_1 = "va", "msg");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ae2dd8ebe629e026 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/metrics.rs:25 
                tracing::info!(key_1 = "va", "msg");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #f8e16eff8c2e31d3 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/metrics.rs:36 
                tracing::info!(monotonic_counter.c1 = 1, "msg");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #3a603c3bcba37542 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/metrics.rs:47 
                tracing::info!(monotonic_counter.c1 = 1, monotonic_counter.c2 = 1, "msg");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #070ff4bb3c3a9fdd — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/metrics.rs:58 
                tracing::info!(
                    monotonic_counter.c1 = 1,
                    monotonic_counter.c2 = 1,
                    monotonic_counter.c3 = 1,
                    monotonic_counter.c4 = 1,
                    "msg"
                );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #87cec9f1ab7c56b2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/metrics.rs:75 
                tracing::info!(
                    monotonic_counter.c1 = 1,
                    monotonic_counter.c2 = 1,
                    monotonic_counter.c3 = 1,
                    monotonic_counter.c4 = 1,
                    monotonic_counter.c5 = 1,
                    monotonic_counter.c6 = 1,
                    monotonic_counter.c7 = 1,
                    monotonic_counter.c8 = 1,
                    "msg"
                );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #369880340d356556 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/metrics.rs:96 
                tracing::info!(monotonic_counter.c1 = 1, key_1 = 1_i64, "msg");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b9937193669273ef — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/metrics.rs:107 
                tracing::info!(
                    monotonic_counter.c1 = 1,
                    key_1 = 1_i64,
                    key_2 = 1_i64,
                    "msg"
                );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #d777ffb0d912c9bf — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/metrics.rs:123 
                tracing::info!(
                    monotonic_counter.c1 = 1,
                    key_1 = 1_i64,
                    key_2 = 1_i64,
                    key_3 = 1_i64,
                    key_4 = 1_i64,
                    "msg"
                );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b32da9298c540ddb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/metrics.rs:141 
                tracing::info!(
                    monotonic_counter.c1 = 1,
                    key_1 = 1_i64,
                    key_2 = 1_i64,
                    key_3 = 1_i64,
                    key_4 = 1_i64,
                    key_5 = 1_i64,
                    key_6 = 1_i64,
                    key_7 = 1_i64,
                    key_8 = 1_i64,
                    "msg"
                );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry tooling Excluded from app score unreachable #44fa1d420f69fb9a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/examples/opentelemetry-otlp.rs:153 
    tracing::info!(
        monotonic_counter.foo = 1_u64,
        key_1 = "bar",
        key_2 = 10,
        "handle foo",
    );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry tooling Excluded from app score unreachable #edc35e6405ab456f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/examples/opentelemetry-otlp.rs:160 
    tracing::info!(histogram.baz = 10, "histogram example",);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #488bc4d35a7e7874 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/layer.rs:1366 
            tracing::error!(
                error = &err as &(dyn std::error::Error + 'static),
                "request error!"
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #974bbcdf1d80a9ce — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/metrics.rs:520 
            tracing::info!(key = "val", "foo");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

anyhow

rust dependency
expand_more 9 low-confidence finding(s)
low env_fs dependency Excluded from app score #5e719c6c1afc76d4 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:27 
        } else if let Some(rustc_bootstrap) = env::var_os("RUSTC_BOOTSTRAP") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #105273814564f3b3 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:117 
    if env::var_os("RUSTC_STAGE").is_some() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd5539438a1c6fbb — Environment-variable access.
pkgs/rust/[email protected]/build.rs:140 
    let rustc_wrapper = env::var_os("RUSTC_WRAPPER").filter(|wrapper| !wrapper.is_empty());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63ca96c17060d75d — Environment-variable access.
pkgs/rust/[email protected]/build.rs:142 
        env::var_os("RUSTC_WORKSPACE_WRAPPER").filter(|wrapper| !wrapper.is_empty());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea83cdfc869eb000 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:164 
    if let Some(target) = env::var_os("TARGET") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d29b9f46b152810a — Environment-variable access.
pkgs/rust/[email protected]/build.rs:169 
    if let Ok(rustflags) = env::var("CARGO_ENCODED_RUSTFLAGS") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1835ce243b4387c2 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:207 
    env::var_os(key).unwrap_or_else(|| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2871e75cd8596d0c — Environment-variable access.
pkgs/rust/[email protected]/src/backtrace.rs:200 
            let enabled = match env::var_os("RUST_LIB_BACKTRACE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf37490ea4034a18 — Environment-variable access.
pkgs/rust/[email protected]/src/backtrace.rs:202 
                None => match env::var_os("RUST_BACKTRACE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

axum

rust dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #bba5a0610669614e — Environment-variable access.
pkgs/rust/[email protected]/benches/benches.rs:252 
    std::env::var("GITHUB_ACTIONS").is_ok()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #6fdf6e9a325f171c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/extract/raw_form.rs:87 
        let req = Request::post("http://example.com/test")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0f2cfb121e0ef412 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/extract/raw_form.rs:111 
        let req = Request::post("http://example.com/test")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

base64

rust dependency
expand_more 1 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #4e26f6ac824c7035 — Filesystem access.
pkgs/rust/[email protected]/examples/base64.rs:69 
        Some(f) => Box::new(File::open(f).unwrap()),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

chrono

rust dependency
expand_more 9 low-confidence finding(s)
low env_fs dependency Excluded from app score #019dd6837cbcf5d1 — Filesystem access.
pkgs/rust/[email protected]/src/offset/local/tz_info/timezone.rs:45 
            return Self::from_tz_data(&fs::read("/etc/localtime")?);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcf3ed91d04a909e — Filesystem access.
pkgs/rust/[email protected]/src/offset/local/tz_info/timezone.rs:619 
    return Ok(File::open(path)?);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dec4d6dfa6b40506 — Filesystem access.
pkgs/rust/[email protected]/src/offset/local/tz_info/timezone.rs:625 
            return Ok(File::open(path)?);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d5b9cda808a2bbf — Filesystem access.
pkgs/rust/[email protected]/src/offset/local/tz_info/timezone.rs:629 
            if let Ok(file) = File::open(PathBuf::from(folder).join(path)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffb26086a969ccef — Filesystem access.
pkgs/rust/[email protected]/src/offset/local/tz_info/timezone.rs:684 
    match File::open(TZDATA_PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90ca1b6a5ad8c59f — Environment-variable access.
pkgs/rust/[email protected]/src/offset/local/tz_info/timezone.rs:913 
            if let Ok(tz) = std::env::var("TZ") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c06d1628327538de — Filesystem access.
pkgs/rust/[email protected]/src/offset/local/unix.rs:83 
    let bytes = fs::read(format!("{}/{}", TZDB_LOCATION, tz_name)).ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8749d579c5ed33f7 — Environment-variable access.
pkgs/rust/[email protected]/src/offset/local/unix.rs:92 
        let env_tz = env::var("TZ").ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b91fdb658c11142 — Environment-variable access.
pkgs/rust/[email protected]/src/offset/local/unix.rs:118 
                let env_tz = env::var("TZ").ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

clap

rust dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #1dd585febba884af — Filesystem access.
pkgs/rust/[email protected]/src/app/parser.rs:133 
        let mut file = match File::create(out_dir.join(file_name)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c896d21822ffcdd7 — Environment-variable access.
pkgs/rust/[email protected]/src/args/arg.rs:3607 
        self.v.env = Some((name, env::var_os(name)));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #453b4d4f7e7fc05a — Environment-variable access.
pkgs/rust/[email protected]/src/fmt.rs:36 
    env::var("TERM").ok() == Some(String::from("dumb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

csv

rust dependency
expand_more 3 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #16f8d407b9e26a0a — Filesystem access.
pkgs/rust/[email protected]/examples/tutorial-read-01.rs:5 
    let file = File::open(file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3476c58c43e06b1 — Filesystem access.
pkgs/rust/[email protected]/src/reader.rs:110 
        Ok(Reader::new(self, File::open(path)?))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #796dbdb7050bfce9 — Filesystem access.
pkgs/rust/[email protected]/src/writer.rs:91 
        Ok(Writer::new(self, File::create(path)?))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

cxx

rust dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #ea77652d1f0027ac — Environment-variable access.
pkgs/rust/[email protected]/build.rs:9 
    let manifest_dir_opt = env::var_os("CARGO_MANIFEST_DIR").map(PathBuf::from);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6712c2f151154df5 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:66 
    let rustc = env::var_os("RUSTC")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #2144c4fa7962f20f — Environment-variable access.
pkgs/rust/[email protected]/tools/cargo/build.rs:65 
    if let Some(out_dir) = env::var_os("OUT_DIR") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

hf-hub

rust dependency
expand_more 12 low-confidence finding(s)
low env_fs dependency Excluded from app score #fd267abb121fb8b9 — Filesystem access.
pkgs/rust/[email protected]/src/api/sync.rs:326 
        let mut file = std::fs::File::create(&filename)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c47db8c425e87cda — Filesystem access.
pkgs/rust/[email protected]/src/api/sync.rs:560 
        let val = Sha256::digest(std::fs::read(&*downloaded_path).unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79b2e2d944f06b54 — Filesystem access.
pkgs/rust/[email protected]/src/api/sync.rs:593 
        let val = Sha256::digest(std::fs::read(&*downloaded_path).unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb7bc48372cf0321 — Filesystem access.
pkgs/rust/[email protected]/src/api/tokio.rs:645 
        let val = Sha256::digest(std::fs::read(&*downloaded_path).unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #809af56b7a599914 — Filesystem access.
pkgs/rust/[email protected]/src/api/tokio.rs:672 
        let val = Sha256::digest(std::fs::read(&*downloaded_path).unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cf4af19ddf2085f — Filesystem access.
pkgs/rust/[email protected]/src/api/tokio.rs:702 
        let val = Sha256::digest(std::fs::read(&*downloaded_path).unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #6d47193cb211a1ee — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/lib.rs:55 
            log::info!("Token file not found {token_filename:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #76cacbaa5bddfbc2 — Filesystem access.
pkgs/rust/[email protected]/src/lib.rs:57 
        match std::fs::read_to_string(token_filename) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b1cd67baded4aee — Filesystem access.
pkgs/rust/[email protected]/src/lib.rs:139 
        let commit_hash = std::fs::read_to_string(commit_path).ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #945f69e7417acf54 — Environment-variable access.
pkgs/rust/[email protected]/src/lib.rs:194 
        let mut path = match std::env::var("HF_HOME") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11ad2e2a226a6dec — Environment-variable access.
pkgs/rust/[email protected]/src/lib.rs:302 
        if let Ok(hf_home) = std::env::var("HF_HOME") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a4cffba6c55360c — Environment-variable access.
pkgs/rust/[email protected]/src/lib.rs:315 
        if let Ok(hf_home) = std::env::var("HF_HOME") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

hf-xet

rust dependency
expand_more 179 low-confidence finding(s)
low env_fs dependency Excluded from app score #ea1ecc211ed4d030 — Filesystem access.
pkgs/rust/[email protected]/hf_xet/src/profiling.rs:81 
            fs::File::create(&flame_path).inspect_err(|e| eprintln!("Profiler: Error writing flamegraph file: {e:?}"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6af66636bb8caf18 — Filesystem access.
pkgs/rust/[email protected]/hf_xet/src/profiling.rs:90 
            fs::File::create(pb_path).inspect_err(|e| eprintln!("Profiler: Failed opening pperf out file: {e:?}"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #7d98c262ce887a70 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/hf_xet/src/py_file_download_group.rs:147 
                tracing::warn!("abort() failed during __exit__ exception path: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #83dbc4745f616010 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/hf_xet/src/py_file_download_group.rs:207 
                tracing::warn!(id = self.inner.id().0, error = ?e, "PyXetFileDownloadGroup progress thread join failed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #65cdbd8acb4edc9f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/hf_xet/src/py_upload_commit.rs:208 
                tracing::warn!("abort() failed during __exit__ exception path: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #22d85094ea323ace — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/hf_xet/src/py_upload_commit.rs:327 
                tracing::warn!(id = self.inner.id().0, error = ?e, "PyXetUploadCommit progress thread join failed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #31daeb872bb13faf — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/client_unit_testing.rs:648 
        .upload_shard(std::fs::read(&new_shard_path).unwrap().into(), permit)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02ba8c020b3600f3 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/client_unit_testing.rs:653 
        MDBShardInfo::filter_cas_chunks_for_global_dedup(&mut std::fs::File::open(&new_shard_path).unwrap()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #deccf95a1f64fa4d — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/client_unit_testing.rs:711 
        .upload_shard(std::fs::read(&shard_path).unwrap().into(), permit)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ceae13ba787dbca — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/client_unit_testing.rs:716 
        MDBShardInfo::filter_cas_chunks_for_global_dedup(&mut std::fs::File::open(&shard_path).unwrap()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e5354b1f311043e — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:480 
            let shard_bytes = std::fs::read(&path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be4bf81253f207ce — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:508 
            let shard_bytes = std::fs::read(&shard_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b317a6771040bde — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:653 
        let file = File::open(&file_path).map_err(|_| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7fc6647d87728bd — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:670 
        let file = File::open(&file_path).map_err(|_| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #589f0a19ec37c61a — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:693 
        match File::open(file_path) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #486a99561f1d34e0 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:717 
        let Ok(file) = File::open(&file_path) else {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #879428ab22d2bdfb — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:728 
        let mut file = File::open(&file_path).map_err(|_| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca750248972f8e91 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:784 
        let data = std::fs::read(&file_path).map_err(|_| ClientError::XORBNotFound(*hash))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02613f7287e3b248 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:828 
        let file = File::open(&file_path).map_err(|_| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #671cbd681cd26091 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:894 
        let data = std::fs::read(&path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf55001dd7467208 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:1130 
            let shard_bytes = std::fs::read(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d58aca8ed0314bc — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:1210 
            let shard_bytes = std::fs::read(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6c992441544124d — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:1249 
            let mut shard_file = File::open(&shard_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd176c585d951978 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:1341 
        let mut file = File::open(&shard_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f89abef1c87f0510 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:1364 
        let mut file = File::open(&file_path).map_err(|_| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd1fe6f2533fbba1 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:1490 
                return Ok(Some(std::fs::read(filename)?.into()));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dc40a35e431bea7 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:1494 
            let shard_bytes = std::fs::read(filename)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23a9a59e2b395b47 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:1549 
        let written_shard_bytes = std::fs::read(&shard_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75cb6f272238f5ec — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:1729 
            let mut file = File::open(&file_path).map_err(|_| ClientError::XORBNotFound(MerkleHash::default()))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11121222d908a450 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_client.rs:1894 
        let file = File::open(&file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #c3c479919586fc34 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/main.rs:111 
    tracing::info!("Starting local CAS server with config: {:?}", config);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #2721d64c2316f0fc — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/main.rs:113 
        tracing::info!("Storage mode: in-memory");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #fd35cb09870bdb55 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/main.rs:115 
        tracing::info!("Storage mode: disk-backed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #344079a17ec67f6c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/main.rs:116 
        tracing::info!("Data directory: {:?}", config.data_directory);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #82489e298e44033d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/main.rs:118 
    tracing::info!("Listening on: {}:{}", config.host, config.port);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #f0b23d187e787704 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/server.rs:219 
        tracing::info!("Local CAS server listening on {}", addr);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b5cfa90bc09b0459 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/server.rs:242 
        tracing::info!("Local CAS server listening on {}", addr);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #45565eb21e6f1158 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/server.rs:1226 
            tracing::info!("Testing with in-memory storage");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #450ea52e2d82b0b1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/server.rs:1234 
            tracing::info!("Testing with disk-backed storage");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #9dd9a8b8669d7c0f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/simulation_control_client.rs:94 
                            tracing::warn!(
                                "simulation config apply failed: config={} value={} attempt={}/{} status={} body={}",
                                config_name,
                                config_value,
                                attempt,
                                CONFIG_POST_MAX_ATTEMPTS,
                                status,
                                body
                            );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #66db08ef35feb3f1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/simulation_control_client.rs:106 
                        tracing::warn!(
                            "simulation config apply retrying: config={} value={} attempt={}/{} status={} body={}",
                            config_name,
                            config_value,
                            attempt,
                            CONFIG_POST_MAX_ATTEMPTS,
                            status,
                            body
                        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #84938e171686068e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/simulation_control_client.rs:118 
                            tracing::warn!(
                                "simulation config apply failed after retries: config={} value={} attempt={}/{} error={}",
                                config_name,
                                config_value,
                                attempt,
                                CONFIG_POST_MAX_ATTEMPTS,
                                error
                            );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #2cff9d81166c7487 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/local_server/simulation_control_client.rs:129 
                        tracing::warn!(
                            "simulation config apply retrying after transport error: config={} value={} attempt={}/{} error={}",
                            config_name,
                            config_value,
                            attempt,
                            CONFIG_POST_MAX_ATTEMPTS,
                            error
                        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #7afc1ac98be10348 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/network_simulation/bandwidth_limit_router.rs:354 
                tracing::error!(error = %e, "bandwidth proxy accept loop failed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #e5725145f0980f1d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/simulation_server.rs:248 
                            tracing::error!(error = %e, "bandwidth proxy accept loop failed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #c6614942d8944b34 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/simulation_server.rs:1209 
            tracing::info!("Testing with in-memory storage");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #06a10bc4882bcbb7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/simulation_server.rs:1217 
            tracing::info!("Testing with disk-backed storage");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #26d45e0813ed0695 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/cas_client/simulation/socket_proxy.rs:226 
        std::fs::File::create(&socket_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f89b0d544b4c3b18 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/chunk_cache/disk.rs:329 
            let mut file = match File::open(&path) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bdfee88fc24f4b76 — Filesystem access.
pkgs/rust/[email protected]/xet_client/src/chunk_cache/disk.rs:477 
        let Ok(mut file) = File::open(path) else {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #ad20b60f3cae3f08 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/xet_client/src/common/http_client.rs:418 
            let mut test_request = client.get("https://example.com/api/data").build().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ddc203cb3bb9868a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/xet_client/src/common/http_client.rs:435 
            let mut test_request = client.get("http://example.com/api/data").build().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e90c610e9ad45cb5 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/xet_client/src/common/http_client.rs:451 
            let mut test_request = client
                .get("https://example.com:8443/path/to/resource?query=value&foo=bar")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #6608918855f86344 — Filesystem access.
pkgs/rust/[email protected]/xet_core_structures/src/metadata_shard/set_operations.rs:397 
    let mut reader = BufReader::new(File::open(path)?);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b29f68093913f619 — Filesystem access.
pkgs/rust/[email protected]/xet_core_structures/src/metadata_shard/set_operations.rs:512 
        let mut disk_union_reader = BufReader::new(File::open(&disk_union_path)?);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1fc32e3a5f4ddc8 — Filesystem access.
pkgs/rust/[email protected]/xet_core_structures/src/metadata_shard/set_operations.rs:524 
        let mut disk_difference_reader = BufReader::new(File::open(&disk_difference_path)?);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c22605fd9b37ad99 — Filesystem access.
pkgs/rust/[email protected]/xet_core_structures/src/metadata_shard/shard_benchmark.rs:76 
            MDBShardInfo::load_from_reader(&mut File::open(path)?)?.print_report();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d69beb8297ce292 — Filesystem access.
pkgs/rust/[email protected]/xet_core_structures/src/metadata_shard/shard_file_handle.rs:142 
        let reader = File::open(&self.path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78abf955dab2f31f — Filesystem access.
pkgs/rust/[email protected]/xet_core_structures/src/metadata_shard/shard_file_handle.rs:161 
        let mut f = std::fs::File::open(&path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8c028eef9f0407f — Filesystem access.
pkgs/rust/[email protected]/xet_core_structures/src/metadata_shard/shard_file_handle.rs:279 
        std::fs::File::open(&self.path)?.read_exact(buffer)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #259110f89a5b2525 — Filesystem access.
pkgs/rust/[email protected]/xet_core_structures/src/metadata_shard/shard_file_handle.rs:372 
        Ok(BufReader::with_capacity(2048, std::fs::File::open(&self.path)?))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88aca84abcc13749 — Filesystem access.
pkgs/rust/[email protected]/xet_core_structures/src/metadata_shard/shard_file_manager.rs:1412 
                        std::fs::File::create(&dest_file_name).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #57c951a7dc4a1b40 — Filesystem access.
pkgs/rust/[email protected]/xet_data/examples/chunk/main.rs:29 
        Box::new(File::open(file_path).unwrap())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #174b7891b19f82f0 — Filesystem access.
pkgs/rust/[email protected]/xet_data/examples/chunk/main.rs:36 
        Box::new(BufWriter::new(File::create(save).unwrap()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #af76fd7898e2e984 — Filesystem access.
pkgs/rust/[email protected]/xet_data/examples/hash/main.rs:55 
        Box::new(BufReader::new(File::open(path).unwrap()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #7d3d4a7fc1c0c870 — Filesystem access.
pkgs/rust/[email protected]/xet_data/examples/hash/main.rs:61 
        Box::new(File::create(path).unwrap())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #6bf596067b86f4c2 — Filesystem access.
pkgs/rust/[email protected]/xet_data/examples/xorb-check/main.rs:47 
        Some(path) => Box::new(BufReader::new(File::open(path).unwrap())),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #a0fbb6efa2bdc70b — Filesystem access.
pkgs/rust/[email protected]/xet_data/examples/xorb-check/main.rs:85 
            (false, Some(path)) => Box::new(File::create(path).unwrap()),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3bad0f7126f148f — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/file_reconstruction/file_reconstructor.rs:539 
        let file_data = std::fs::read(&file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccda255fd565b29a — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/file_reconstruction/file_reconstructor.rs:567 
        let file_data = std::fs::read(&file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2793a04d018958dc — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/file_reconstruction/file_reconstructor.rs:593 
        let file_data = std::fs::read(&file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e58d6c21516563d3 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/file_reconstruction/file_reconstructor.rs:1322 
        std::fs::write(&file_path, vec![0u8; file_len as usize]).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91a2d9358a774431 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/file_reconstruction/file_reconstructor.rs:1367 
        let reconstructed = std::fs::read(&file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49394fe6eb63b75b — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/file_reconstruction/file_reconstructor.rs:1383 
        std::fs::write(&file_path, &pattern).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60a5a64d6274f8e7 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/file_reconstruction/file_reconstructor.rs:1394 
        let result = std::fs::read(&file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #e5a24d201674f02c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_data/src/file_reconstruction/reconstruction_terms/xorb_block.rs:173 
                            tracing::warn!("chunk cache put failed: {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #ff843219f433b711 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/bin/example.rs:71 
    let file_reader = File::open(&arg.file)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49913490be1223f8 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/bin/example.rs:117 
        Some(path) => Box::new(File::open(path)?),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f1aaddeab079fd5 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/data_client.rs:67 
    let mut reader = File::open(&filename)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa54059ecb21d2d5 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/data_client.rs:114 
    let mut reader = File::open(&filename)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #760f867c9a61430c — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/data_client.rs:289 
        std::fs::write(&file_path, b"").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2d12fddb5389ecc — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/data_client.rs:306 
        std::fs::write(&file_path, content).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c8ca816366f651f — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/data_client.rs:328 
        std::fs::write(&file_path, &content).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0313da34d827a582 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/data_client.rs:364 
        std::fs::write(&file1_path, b"First file content").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #669eea0746c4a384 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/data_client.rs:365 
        std::fs::write(&file2_path, b"Second file content").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1285ed08082d4838 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/data_client.rs:395 
        std::fs::write(&file_path, &content).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8ccc09e76202d7f — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:493 
                write(&out_path, vec![0u8; original_data.len()]).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #419cd3ed0aa93e79 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:501 
                let result = read(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16db96645f719c5f — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:521 
                write(&out_path, vec![0u8; original_data.len()]).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b2e5d0d31b7987f — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:548 
                let result = read(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21360c1b54a6a3c7 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:877 
                let file = std::fs::File::create(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c04efaf60587213 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:902 
                let file = std::fs::File::create(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfe08b0e50a3d628 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:927 
                let file = std::fs::File::create(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a4f31c5addb6e84 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:952 
                let file = std::fs::File::create(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b7844d848b3dad3 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:1164 
                let file = std::fs::File::create(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed530c95a45c214d — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:1189 
                let file = std::fs::File::create(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc16d06679545dc6 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_download_session.rs:1214 
                let file = std::fs::File::create(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #455abd1402bd73e5 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_upload_session.rs:150 
                    let mut reader = File::open(&file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21951765d8ca9ee0 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_upload_session.rs:310 
        let mut reader = File::open(file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f4d6eaabd47d5b8 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_upload_session.rs:739 
        let mut reader = File::open(pointer_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f2b15cc0c4a4972 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_upload_session.rs:772 
                write(&original_path, original_data).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ac88c75a5d668b0 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/file_upload_session.rs:783 
                let result_data = read(hydrated_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bc509a5a82fa17a — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/range_upload.rs:683 
        let downloaded = std::fs::read(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50c787ed33ad12f5 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/range_upload.rs:1456 
        std::fs::read(&out).unwrap()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17af615de3e1b908 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/shard_interface/native.rs:326 
    let mut file = File::open(&si.path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #3886b07374da6790 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_data/src/processing/shard_interface/wasm.rs:80 
                tracing::warn!(error = ?e, "global dedup query failed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #e926ba6aaffa3090 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:87 
    let mut file = File::create(path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04147dd95b3eefd8 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:121 
    let mut file = File::create(path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07dec680b6cb944b — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:173 
        File::open(&path1).unwrap().read_to_end(&mut buf1).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #824a0fc957fc0627 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:174 
        File::open(&path2).unwrap().read_to_end(&mut buf2).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #735b409df407528e — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:325 
                    std::fs::write(out_file, pf.as_pointer_file().unwrap().as_bytes()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6ca0b4f6f942c07 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:342 
                std::fs::write(self.ptr_dir.join(files[i].file_name().unwrap()), serde_json::to_string(&xf).unwrap())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e35662d4a1bc2fea — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:363 
            let xf: XetFileInfo = serde_json::from_reader(File::open(entry.path()).unwrap()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #445949df801b6e95 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:375 
            let xf: XetFileInfo = serde_json::from_reader(File::open(entry.path()).unwrap()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c09dccf3fac33f0 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:378 
            let out_file = File::create(&out_filename).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4daa81dba0776a0 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:420 
            let xf: XetFileInfo = serde_json::from_reader(File::open(entry.path()).unwrap()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c3f854763f82577 — Filesystem access.
pkgs/rust/[email protected]/xet_data/src/processing/test_utils.rs:423 
            let mut file = File::create(&out_filename).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #8ce538ce56429a97 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/examples/example.rs:93 
    std::fs::write("upload_metadata.json", serde_json::to_string_pretty(&uploads_vec)?)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #f3478f1d2c17a559 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/examples/example.rs:99 
    let metadata: Vec<XetFileMetadata> = serde_json::from_str(&std::fs::read_to_string(metadata_file)?)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #4939aaa8abb944f3 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/examples/example_sync.rs:91 
    std::fs::write("upload_metadata.json", serde_json::to_string_pretty(&uploads_vec)?)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #122312fd2a9cd1b3 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/examples/example_sync.rs:97 
    let metadata: Vec<XetFileMetadata> = serde_json::from_str(&std::fs::read_to_string(metadata_file)?)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d58a75d83ff62c66 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/download.rs:113 
                File::create(output_path).with_context(|| format!("failed to create {}", output_path.display()))?

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9a17f3cf391404b — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/download.rs:174 
        std::fs::write(&src, content).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #116aeed2390bdc1a — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/download.rs:241 
        std::fs::write(&dest, vec![0xFFu8; 2048]).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56e3897a448a5a3a — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/download.rs:255 
        let out = std::fs::read(&dest).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #786b3088770497be — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/download.rs:270 
        std::fs::write(&dest, vec![0u8; 1024]).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76c040fe1244027f — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/download.rs:283 
        let out = std::fs::read(&dest).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fae72e4ca85ed361 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/download.rs:305 
        let content = std::fs::read(&dest).unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #095778cd19af7a01 — Environment-variable access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/main.rs:100 
        resolve_endpoint(self.endpoint.as_deref(), std::env::var("HF_ENDPOINT").ok().as_deref())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6a8c5c3ca6f2216 — Environment-variable access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/main.rs:104 
        resolve_token(self.token.as_deref(), std::env::var("HF_TOKEN").ok().as_deref())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51874df24cf4928b — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/upload.rs:40 
        std::fs::write(output_path, json)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3787e74f279b4d2 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/upload.rs:154 
        std::fs::write(&src, b"hello xet world").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb482e85c51f4622 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/upload.rs:180 
                std::fs::write(&path, format!("content for file {i}").as_bytes()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f65150c77968cfeb — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/upload.rs:205 
        std::fs::write(&src, b"sha256 test data").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a89cad1ce294ee1 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/upload.rs:237 
        std::fs::write(&src, b"json output test").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76e303d053be7e52 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/upload.rs:250 
        std::fs::write(&json_path, &json).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34f13f5bde9681da — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/bin/xtool/upload.rs:252 
        let parsed: Vec<XetFileMetadata> = serde_json::from_str(&std::fs::read_to_string(&json_path).unwrap()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #3ac16fe33acc0a58 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_pkg/src/xet_session/file_download_group.rs:405 
                        tracing::error!(task_id = %task_id, err = %e, "Download task failed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #ceb0c4c53d17f691 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/xet_session/upload_commit.rs:900 
        std::fs::write(&src, data).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21413f7fb1c79c4f — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/xet_session/upload_commit.rs:923 
        std::fs::write(&src, b"path metadata").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff91271c13688fe8 — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/xet_session/upload_commit.rs:1326 
        std::fs::write(&src, data)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e351984b5fd8008b — Filesystem access.
pkgs/rust/[email protected]/xet_pkg/src/xet_session/upload_commit.rs:1344 
        std::fs::write(&src, data)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4129a0e740a2f710 — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/core/cache_dir.rs:16 
    if let Ok(cache) = env::var("HF_XET_CACHE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #050d8e9d06d667ce — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/core/cache_dir.rs:20 
    } else if let Ok(hf_home) = env::var("HF_HOME") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca23f0055837736f — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/core/cache_dir.rs:25 
    } else if let Ok(xdg_cache_home) = env::var("XDG_CACHE_HOME") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89b11189f52ee4a1 — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/core/runtime/native.rs:42 
    if let Ok(val) = std::env::var("TOKIO_WORKER_THREADS") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #9ca6cbe78049c972 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/xet_runtime/src/error.rs:45 
            tracing::error!("Panic reported on xet worker task: {err:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #d7176dd4670294c8 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:79 
        File::create(&file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7ffce42775e4067 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:82 
        let mut perms = File::open(&file_path).unwrap().metadata().unwrap().permissions();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #454a4bab7e0fecb4 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:89 
        let src_file = File::create(&src_file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #633cffedb0db3d04 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:101 
        let updated_metadata = File::open(file_path).unwrap().metadata().unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cd7e28bf86ba62a — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:102 
        let src_metadata = File::open(src_file_path).unwrap().metadata().unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cafae445d6a00953 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:112 
        let file = File::create(&file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #587a55807de4548c — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:116 
        let src_file = File::create(&src_file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a49c13dbf92cb9c — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:155 
        let file = File::create(&file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77bf22c30af736c0 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:159 
        let src_file = File::create(&src_file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6a7b83490b342c2 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:193 
        File::create(&file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fb0c27d604e4900 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:196 
        let mut perms = File::open(&file_path).unwrap().metadata().unwrap().permissions();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6d8b7cd0a6254ef — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:203 
        let src_file = File::create(&src_file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b969c279f6f6858f — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:215 
        let updated_metadata = File::open(file_path).unwrap().metadata().unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94fd253def513a15 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/file_metadata.rs:216 
        let src_metadata = File::open(src_file_path).unwrap().metadata().unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6846cc36d1063149 — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/privilege_context.rs:264 
        let test_path = std::env::var("HF_XET_TEST_PATH")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebd06c9c0e99917c — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/privilege_context.rs:291 
        let test_path = std::env::var("HF_XET_TEST_PATH")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0179cf6134ba2a1 — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/privilege_context.rs:328 
        let test_path = std::env::var("HF_XET_TEST_PATH")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07d87a77cecb6bc2 — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/privilege_context.rs:360 
        let test_path = std::env::var("HF_XET_TEST_PATH")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3032846e6519a9a4 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/safe_file_creator.rs:193 
        File::open(&dest_path).unwrap().read_to_string(&mut contents).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8be5fbf7eb753aa — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/safe_file_creator.rs:225 
        File::open(&dest_path).unwrap().read_to_string(&mut contents).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8b23c21f9f068b9 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/safe_file_creator.rs:247 
            let mut file = File::create(&dest_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb61aac78071339a — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/safe_file_creator.rs:263 
        File::open(&dest_path).unwrap().read_to_string(&mut contents).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efd1917197c14bce — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/safe_file_creator.rs:288 
        File::open(&dest_path).unwrap().read_to_string(&mut contents).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50a5df6cace5842a — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/safe_file_creator.rs:304 
        File::open(&dest_path).unwrap().read_to_string(&mut contents).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35fbed5bed842a60 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/safe_file_creator.rs:316 
            let mut file = File::create(&dest_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7be18cbb565a3402 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/file_utils/safe_file_creator.rs:329 
        File::open(&dest_path).unwrap().read_to_string(&mut contents).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3875944a52dbd798 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/logging/init.rs:123 
    std::fs::write(&path, [])?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afde37d687e874eb — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/logging/system_monitor.rs:597 
        let log_reader = BufReader::new(File::open(log_path.as_path())?);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0d87ff1312ccdf6 — Filesystem access.
pkgs/rust/[email protected]/xet_runtime/src/logging/system_monitor.rs:636 
        let log_reader = BufReader::new(File::open(log_path.as_path())?);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7575365cf4630759 — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/utils/configuration_utils.rs:332 
    if let Ok(val) = std::env::var("HF_XET_HIGH_PERFORMANCE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a988cdb61a0c46a0 — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/utils/configuration_utils.rs:334 
    } else if let Ok(val) = std::env::var("HF_XET_HP") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb4da7e86f569945 — Environment-variable access.
pkgs/rust/[email protected]/xet_runtime/src/utils/guards.rs:40 
        let prev = env::var(key).ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

image

rust dependency
expand_more 13 low-confidence finding(s)
low env_fs dependency Excluded from app score #6b465474ce745d15 — Filesystem access.
pkgs/rust/[email protected]/benches/decode.rs:95 
        let buf = fs::read(path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0715816e16342872 — Filesystem access.
pkgs/rust/[email protected]/benches/encode.rs:79 
            let file = File::create("temp.bmp").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a892fb6d878445b3 — Filesystem access.
pkgs/rust/[email protected]/src/codecs/bmp/decoder.rs:1404 
            BufReader::new(std::fs::File::open("tests/images/bmp/images/Core_8_Bit.bmp").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65c6bc04d2316b57 — Filesystem access.
pkgs/rust/[email protected]/src/codecs/bmp/decoder.rs:1452 
            let mut data = std::fs::read(&path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d29d2b1f6bfc050 — Filesystem access.
pkgs/rust/[email protected]/src/codecs/jpeg/decoder.rs:199 
        let data = fs::read("tests/images/jpg/portrait_2.jpg").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c7111f10512d685 — Filesystem access.
pkgs/rust/[email protected]/src/codecs/openexr.rs:375 
        read_as_rgba_image(BufReader::new(File::open(path)?))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #704f81b77f6f4dfb — Filesystem access.
pkgs/rust/[email protected]/src/codecs/openexr.rs:380 
        read_as_rgb_image(BufReader::new(File::open(path)?))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8d1973fd55db1ba — Filesystem access.
pkgs/rust/[email protected]/src/codecs/openexr.rs:428 
                HdrDecoder::new(BufReader::new(File::open(reference_path).unwrap())).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6ca856cc4fbb58d — Filesystem access.
pkgs/rust/[email protected]/src/codecs/png.rs:717 
            std::fs::File::open("tests/images/png/bugfixes/debug_triangle_corners_widescreen.png")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7f53c900d030e4a — Filesystem access.
pkgs/rust/[email protected]/src/codecs/png.rs:744 
            std::fs::read("tests/images/png/bugfixes/debug_triangle_corners_widescreen.png")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7723fd043640171 — Filesystem access.
pkgs/rust/[email protected]/src/codecs/qoi.rs:112 
        let decoder = QoiDecoder::new(File::open("tests/images/qoi/basic-test.qoi").unwrap())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07e954e3e6fa65a5 — Filesystem access.
pkgs/rust/[email protected]/src/image_reader/free_functions.rs:49 
    let buffered_file_write = &mut BufWriter::new(File::create(path)?); // always seekable

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf372376f3592a37 — Filesystem access.
pkgs/rust/[email protected]/src/image_reader/image_reader_type.rs:304 
            inner: BufReader::new(File::open(path)?),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jiter

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #1b15d1dad57131c4 — Filesystem access.
pkgs/rust/[email protected]/crates/jiter/benches/main.rs:11 
    let mut file = File::open(path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3829d9f9206a10d7 — Filesystem access.
pkgs/rust/[email protected]/crates/jiter/benches/python.rs:36 
    let mut file = File::open(path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jsonschema

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #e92daa36da42560a — Filesystem access.
pkgs/rust/[email protected]/src/retriever.rs:40 
                    let file = std::fs::File::open(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2b641b769513d12 — Filesystem access.
pkgs/rust/[email protected]/src/validator.rs:290 
        let mut file = File::open(path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

minijinja

rust dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #19ed1488aa3731f4 — Filesystem access.
pkgs/rust/[email protected]/src/loader.rs:216 
        match fs::read_to_string(path) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ngrok

rust dependency
expand_more 6 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #a1cc06618ebee949 — Environment-variable access.
pkgs/rust/[email protected]/examples/connect.rs:17 
        .with_env_filter(std::env::var("RUST_LOG").unwrap_or_default())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #eebddb51b4c95fe7 — Environment-variable access.
pkgs/rust/[email protected]/examples/mingrok.rs:19 
        .with_env_filter(std::env::var("RUST_LOG").unwrap_or_else(|_| "info".into()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #585486585401bbd9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/online_tests.rs:379 
                tracing::debug!(?status);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ae981d3ab4af403b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/online_tests.rs:610 
    tracing::debug!(?err_str);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #4884650e90dbf327 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/online_tests.rs:628 
    tracing::debug!(?err_str);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #7e3c3e3de4a0f239 — Environment-variable access.
pkgs/rust/[email protected]/src/session.rs:358 
        self.authtoken = env::var("NGROK_AUTHTOKEN").ok().map(From::from);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

num_cpus

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #db9ccd13b3c469a4 — Environment-variable access.
pkgs/rust/[email protected]/src/lib.rs:461 
        ::std::env::var(name).ok().map(|val| val.parse().unwrap())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ad0640b383da467 — Filesystem access.
pkgs/rust/[email protected]/src/linux.rs:60 
    let file = match File::open("/proc/cpuinfo") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

opentelemetry-otlp

rust dependency
expand_more 11 low-confidence finding(s)
low env_fs dependency Excluded from app score #172fd420e1d86cf9 — Environment-variable access.
pkgs/rust/[email protected]/src/exporter/mod.rs:214 
        let protocol = match std::env::var(OTEL_EXPORTER_OTLP_PROTOCOL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd0276c3991f7d08 — Environment-variable access.
pkgs/rust/[email protected]/src/exporter/mod.rs:225 
        let endpoint = match std::env::var(OTEL_EXPORTER_OTLP_ENDPOINT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5810e8e24dbb8360 — Environment-variable access.
pkgs/rust/[email protected]/src/exporter/mod.rs:231 
        let timeout = match std::env::var(OTEL_EXPORTER_OTLP_TIMEOUT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3a87e68affbff14 — Environment-variable access.
pkgs/rust/[email protected]/src/exporter/tonic.rs:49 
    } else if let Ok(compression) = std::env::var(env_override) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e8a01fdb08af608 — Environment-variable access.
pkgs/rust/[email protected]/src/exporter/tonic.rs:51 
    } else if let Ok(compression) = std::env::var(OTEL_EXPORTER_OTLP_COMPRESSION) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #425432e151dac7c4 — Environment-variable access.
pkgs/rust/[email protected]/src/metric.rs:351 
        let endpoint = match std::env::var(OTEL_EXPORTER_OTLP_METRICS_ENDPOINT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #489e2b7fb404c2e9 — Environment-variable access.
pkgs/rust/[email protected]/src/metric.rs:356 
        let _timeout = match std::env::var(OTEL_EXPORTER_OTLP_METRICS_TIMEOUT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #965c96229a1a40cc — Environment-variable access.
pkgs/rust/[email protected]/src/metric.rs:419 
        let _endpoint = match std::env::var(OTEL_EXPORTER_OTLP_METRICS_ENDPOINT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e024a25c2f545929 — Environment-variable access.
pkgs/rust/[email protected]/src/metric.rs:429 
        let _timeout = match std::env::var(OTEL_EXPORTER_OTLP_METRICS_TIMEOUT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79803b98b2f27bd3 — Environment-variable access.
pkgs/rust/[email protected]/src/span.rs:351 
        let endpoint_str = match std::env::var(OTEL_EXPORTER_OTLP_TRACES_ENDPOINT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dae1cbe094052e1f — Environment-variable access.
pkgs/rust/[email protected]/src/span.rs:358 
        let _timeout = match std::env::var(OTEL_EXPORTER_OTLP_TRACES_TIMEOUT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pydantic-core

rust dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #65befeed5cc0b830 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:16 
        env::var("PYTHON")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed1968f85e326fd3 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:40 
    if std::env::var("RUSTFLAGS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01de314a1a2943d4 — Environment-variable access.
pkgs/rust/[email protected]/src/errors/validation_exception.rs:202 
        match std::env::var_os("PYDANTIC_ERRORS_OMIT_URL") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d701c213d4b7c6fb — Environment-variable access.
pkgs/rust/[email protected]/src/errors/validation_exception.rs:215 
            None => match std::env::var("PYDANTIC_ERRORS_INCLUDE_URL") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ratatui

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #3ab11261e5b421fa — Environment-variable access.
pkgs/rust/[email protected]/examples/async.rs:64 
    let token = std::env::var("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c4ecdb9190d07dee — Filesystem access.
pkgs/rust/[email protected]/examples/tracing.rs:97 
    let file = File::create("tracing.log").wrap_err("failed to create tracing.log")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

reqwest

rust dependency
expand_more 49 low-confidence finding(s)
low egress tooling Excluded from app score unreachable #dfd9ce58688870ed — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/examples/form.rs:9 
    let response = reqwest::Client::new()
        .post("http://www.baidu.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #68e66033ea7bd27e — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/examples/json_dynamic.rs:12 
    let echo_json: serde_json::Value = reqwest::Client::new()
        .post("https://jsonplaceholder.typicode.com/posts")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #fe22a546b1cc06ff — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/examples/json_typed.rs:30 
    let new_post: Post = reqwest::Client::new()
        .post("https://jsonplaceholder.typicode.com/posts")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #594e8646be7f206b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/examples/tor_socks.rs:15 
    let res = client.get("https://check.torproject.org").send().await?;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low telemetry dependency Excluded from app score #d75801b0270ed58a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/async_impl/client.rs:496 
                                    log::warn!(
                                        "rustls failed to parse DER certificate {err:?} {cert:?}"
                                    );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low egress dependency Excluded from app score #1137658ddd170cf9 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:662 
        let r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #005314bf87a8ab76 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:675 
        let r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #eba16d39ad6e1e12 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:693 
        let r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #710196a0ce38405d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:714 
        let r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5a96e02bb0dde8b8 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:731 
        let req = client
            .get("https://hyper.rs")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f4bdfe30dba5ef71 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:753 
        let req = client
            .get(some_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #49125a3f29c9eee9 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:766 
        let builder = client
            .post("http://httpbin.org/post")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #19a6f7c3216e9b30 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:783 
        let builder = client.get("http://httpbin.org/get");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #641dfbcdcf4247b6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:800 
        let builder = client
            .get("http://httpbin.org/get")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e1c8ae5d53bb2a69 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:812 
        let req = client.get(some_url).build().expect("request build");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #065e8c9173f62fdb — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:917 
            client.get("http://example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #6e6b081ed14eef7e — Filesystem access.
pkgs/rust/[email protected]/src/blocking/multipart.rs:225 
        let file = File::open(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #68b7947b231f8460 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:675 
        let r = client.get(some_url).build().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4ce2957e8dd6e57a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:695 
        let r = client.post(some_url).build().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5e026d8477276a50 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:705 
        let r = client.put(some_url).build().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6de5b2cb712ccbcb — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:735 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fd65c58cec4111c8 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:750 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #091d264095489bc9 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:768 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c58aaede0227527e — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:792 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #934e38e0b277ace3 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:807 
        let mut r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7e7ed63b76b1480a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:820 
        let mut r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1754fbb90bfa9c81 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:838 
        let mut r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b16cb5ae55384d96 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:859 
        let mut r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #900c18ab5453cd0d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:871 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #77aae794ba30a607 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:895 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2d3d54e8325ea4dc — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:929 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1533f6c722aae0ea — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:945 
        let req = client
            .get("https://hyper.rs")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #44bbaefc25ed5b5c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:967 
        let req = client
            .get(some_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1bd43358d917dd37 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:982 
        let req = client.get(some_url).build().expect("request build");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low telemetry dependency Excluded from app score #58eef7fe4dfeb3fe — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/connect.rs:320 
        log::debug!("proxy({proxy_scheme:?}) intercepts '{dst:?}'");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #890b9dc493ba7afb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/connect.rs:449 
        log::debug!("starting new connection: {dst:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #d3dee223d527d51c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/connect.rs:694 
        log::debug!("tunnel to {host}:{port} using basic auth");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #36403fe53d2c6d88 — Environment-variable access.
pkgs/rust/[email protected]/src/proxy.rs:452 
        let raw = env::var("NO_PROXY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1da955d798af2057 — Environment-variable access.
pkgs/rust/[email protected]/src/proxy.rs:453 
            .or_else(|_| env::var("no_proxy"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #847e0677fba9d0e3 — Environment-variable access.
pkgs/rust/[email protected]/src/proxy.rs:901 
        if log::log_enabled!(log::Level::Warn) && env::var_os("HTTP_PROXY").is_some() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #c28d50957dd826fa — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/proxy.rs:902 
            log::warn!("HTTP_PROXY environment variable ignored in CGI");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #add83cd0987ed33e — Environment-variable access.
pkgs/rust/[email protected]/src/proxy.rs:923 
    if let Ok(val) = env::var(var) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e6b5e10691f657e — Environment-variable access.
pkgs/rust/[email protected]/src/proxy.rs:935 
    env::var_os("REQUEST_METHOD").is_some()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b5d581acd5bf4ec — Environment-variable access.
pkgs/rust/[email protected]/src/proxy.rs:1629 
        let orig_val = env::var(&name).ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #f53831371a6d4160 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/wasm/client.rs:351 
        let mut req = client
            .get("https://www.example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8f2832aefcaf6e63 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/wasm/client.rs:376 
        let mut req = client
            .get("https://www.example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #73fcc3e0244a61aa — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/wasm/client.rs:392 
        let mut req2 = client
            .get("https://www.example.com/x")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ad58652c2766f3cd — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/wasm/client.rs:414 
        let mut req = client
            .get("https://www.example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0d1253f53513ca7a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/wasm/client.rs:432 
        let mut req2 = client
            .get("https://www.example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

safetensors

rust dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #c3a9610c62036a3a — Filesystem access.
pkgs/rust/[email protected]/bindings/python/src/lib.rs:666 
        let file = File::open(&filename).map_err(|_| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38043fbd31023975 — Filesystem access.
pkgs/rust/[email protected]/safetensors/src/tensor.rs:1303 
        std::fs::write(&filename, out).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bbab7d597e91ef6 — Filesystem access.
pkgs/rust/[email protected]/safetensors/src/tensor.rs:1304 
        let raw = std::fs::read(&filename).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02b30e608839f2cc — Filesystem access.
pkgs/rust/[email protected]/safetensors/src/tensor.rs:1312 
            let raw = std::fs::read(&filename).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f13811961bd79ef — Filesystem access.
pkgs/rust/[email protected]/safetensors/src/tensor.rs:1351 
            let file = std::fs::File::open(&filename).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fed396e83fe8a6f2 — Filesystem access.
pkgs/rust/[email protected]/safetensors/src/tensor.rs:1363 
        let raw = std::fs::read(&filename).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #961704ffc701cef5 — Filesystem access.
pkgs/rust/[email protected]/safetensors/src/tensor.rs:1439 
        let mut f = std::io::BufWriter::new(std::fs::File::create(filename).unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f66b92981b402088 — Filesystem access.
pkgs/rust/[email protected]/safetensors/src/tensor.rs:1445 
        let reloaded = std::fs::read(filename).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

serde

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #31d826cf8b5f0d58 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:33 
    let target = env::var("TARGET").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80c585cb0b53789c — Environment-variable access.
pkgs/rust/[email protected]/build.rs:111 
    let rustc = env::var_os("RUSTC")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

serde_json

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #dc4e00bf3bb64f71 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:10 
    let target_arch = env::var_os("CARGO_CFG_TARGET_ARCH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b092eac0d438bd4 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:11 
    let target_pointer_width = env::var_os("CARGO_CFG_TARGET_POINTER_WIDTH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

sysinfo

rust dependency
expand_more 21 low-confidence finding(s)
low env_fs dependency Excluded from app score #ad8ef7d8e36813dd — Environment-variable access.
pkgs/rust/[email protected]/src/lib.rs:487 
        if std::env::var("APPLE_CI").is_err() && std::env::var("FREEBSD_CI").is_err() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8366727cd1a41193 — Filesystem access.
pkgs/rust/[email protected]/src/unix/groups.rs:36 
    let _ = File::open("/etc/group").and_then(|mut f| f.read_to_string(&mut s));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7abb6b3953bcf2ed — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/component.rs:101 
    let mut f = File::open(file).ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d71aceb8d5624d67 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/component.rs:114 
    let mut f = File::open(file).ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58737c664a6ff9b7 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/cpu.rs:88 
            let f = match File::open("/proc/stat") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a683dd59fc2df65a — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/cpu.rs:417 
    if File::open(format!(
        "/sys/devices/system/cpu/cpu{cpu_core_index}/cpufreq/scaling_cur_freq",
    ))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7712dfd1f0df8ba2 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/cpu.rs:431 
    if File::open("/proc/cpuinfo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #592eb9a0360760d5 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/cpu.rs:453 
    if let Err(_e) = File::open("/proc/cpuinfo").and_then(|mut f| f.read_to_string(&mut s)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #979e355992a165d6 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/cpu.rs:720 
    if File::open("/proc/cpuinfo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #697cb95d89cbcec9 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/network.rs:26 
    if let Ok(mut f) = File::open(parent.as_ref().join(path)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c13e985f2e284707 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/process.rs:362 
    let mut file = File::open(path.join("stat")).map_err(|_| ())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc62a36259c91c02 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/process.rs:589 
    let mut file = match File::open(path) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2af4941b2b08517f — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/process.rs:793 
    match File::open(entry) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #976e64e384944512 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/system.rs:62 
    if let Ok(buf) = File::open("/proc/stat").and_then(|mut f| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fea5b980f87c32c8 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/system.rs:369 
        if File::open("/proc/loadavg")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e62fa878289b060e — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/system.rs:596 
    if let Ok(buf) = File::open(path).and_then(|mut f| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32347b243552696e — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/system.rs:618 
    let buf = File::open(fallback_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23c9def72614c7f7 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/system.rs:698 
        std::fs::write(
            &tmp1,
            r#"NAME="Ubuntu"
VERSION="20.10 (Groovy Gorilla)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.10"
VERSION_ID="20.10"
VERSION_CODENAME=groovy
UBUNTU_CODENAME=groovy
"#,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4adb0e9ae94a475 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/system.rs:713 
        std::fs::write(
            &tmp2,
            r#"DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=20.10
DISTRIB_CODENAME=groovy
DISTRIB_DESCRIPTION="Ubuntu 20.10"
"#,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4950089f46bebdd4 — Filesystem access.
pkgs/rust/[email protected]/src/unix/linux/utils.rs:18 
    let mut file = File::open(file_path.as_ref())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #839b20e33fd70a38 — Filesystem access.
pkgs/rust/[email protected]/src/unix/users.rs:131 
    let _ = File::open("/etc/passwd").and_then(|mut f| f.read_to_string(&mut s));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tabled

rust dependency
expand_more 1 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #7be6ea5ec0ba6a4f — Filesystem access.
pkgs/rust/[email protected]/examples/iter_table.rs:20 
    let file = std::fs::File::open(path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

thiserror

rust dependency
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #13939668c8620ffc — Environment-variable access.
pkgs/rust/[email protected]/build.rs:23 
    } else if let Some(rustc_bootstrap) = env::var_os("RUSTC_BOOTSTRAP") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac38757265ed997c — Environment-variable access.
pkgs/rust/[email protected]/build.rs:60 
    if env::var_os("RUSTC_STAGE").is_some() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c34b005a7d69e3ae — Environment-variable access.
pkgs/rust/[email protected]/build.rs:83 
    let rustc_wrapper = env::var_os("RUSTC_WRAPPER").filter(|wrapper| !wrapper.is_empty());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4469a40da8d01478 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:85 
        env::var_os("RUSTC_WORKSPACE_WRAPPER").filter(|wrapper| !wrapper.is_empty());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cab01928e4f5926e — Environment-variable access.
pkgs/rust/[email protected]/build.rs:107 
    if let Some(target) = env::var_os("TARGET") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df0a961aeb249540 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:112 
    if let Ok(rustflags) = env::var("CARGO_ENCODED_RUSTFLAGS") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b4db5691af3052c — Environment-variable access.
pkgs/rust/[email protected]/build.rs:139 
    env::var_os(key).unwrap_or_else(|| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tokenizers

rust dependency
expand_more 52 low-confidence finding(s)
low env_fs dependency Excluded from app score #41336e589e349b97 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/bert_benchmark.rs:55 
    let data = std::fs::read_to_string("data/big.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a5c6e10df328d1d — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/bert_benchmark.rs:59 
    for line in BufReader::new(File::open(Path::new("data/big.txt")).unwrap()).lines() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46388f9586e445cc — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/bert_benchmark.rs:91 
    let data = std::fs::read_to_string("data/small.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bb51fab66d63940 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/bert_benchmark.rs:119 
    let data = std::fs::read_to_string("data/big.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b5e65b2ee793d49 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/bpe_benchmark.rs:39 
    let data = std::fs::read_to_string("data/big.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be6df5a18d3e3389 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/bpe_benchmark.rs:81 
    let data = std::fs::read_to_string("data/small.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b43dc75a8062443f — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/bpe_benchmark.rs:104 
    let data = std::fs::read_to_string("data/big.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3264a43db808dab4 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/ci_benchmark.rs:47 
    let data = std::fs::read_to_string("data/big.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #669c491be43def24 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/ci_benchmark.rs:228 
    let roberta_json = std::fs::read_to_string("data/roberta.json").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c6d26731c0a7539 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/ci_benchmark.rs:244 
    let data = std::fs::read_to_string("data/small.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5a4573ec1779757 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/layout_benchmark.rs:30 
    for line in BufReader::new(File::open(Path::new("data/big.txt")).unwrap()).lines() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54bc19c726458f0c — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/llama3_benchmark.rs:18 
    let data = std::fs::read_to_string("data/big.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a3485636487e7e5 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/truncation_benchmark.rs:30 
    let data = std::fs::read_to_string("data/big.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84639866587223e7 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/benches/unigram_benchmark.rs:46 
    let data = std::fs::read_to_string("data/big.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #edf3ca90942599c7 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/examples/encode_batch.rs:6 
    let data = std::fs::read_to_string("data/big.txt")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3d5bf4828ac960a — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/models/bpe/model.rs:410 
        let vocab_file = File::open(vocab)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d244d0e4e47279b5 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/models/bpe/model.rs:430 
        let merge_file = File::open(merges)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85a4f140875a11af — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/models/bpe/model.rs:632 
        let mut vocab_file = File::create(&vocab_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6b7206b03b124e9 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/models/bpe/model.rs:646 
        let mut merges_file = File::create(&merges_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c9a42034c18d234 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/models/unigram/model.rs:396 
        let string = read_to_string(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9e400fa94ae6d2f — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/models/unigram/model.rs:496 
        std::fs::write(&fullpath, string)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65a5b3e64690a52b — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/models/wordlevel/mod.rs:120 
        let vocab_file = File::open(vocab_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35e1b8275c48b367 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/models/wordlevel/mod.rs:206 
        let mut vocab_file = File::create(&vocab_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e50398ac3968aac — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/models/wordpiece/mod.rs:163 
        let file = File::open(vocab)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d461f1426ba155b1 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/models/wordpiece/mod.rs:303 
        let mut vocab_file = File::create(&vocab_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24492155abdcd650 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/tokenizer/mod.rs:1392 
            len += File::open(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ac0d35f7a12130a — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/tokenizer/mod.rs:1401 
                match File::open(filename) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ff5ed146004f797 — Filesystem access.
pkgs/rust/[email protected]/tokenizers/src/tokenizer/mod.rs:1601 
        let mut file = File::create(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2e691da316525e3 — Environment-variable access.
pkgs/rust/[email protected]/tokenizers/src/utils/parallelism.rs:22 
    std::env::var(ENV_VARIABLE).is_ok() || get_override_parallelism().is_some()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f459bcd509e0657 — Environment-variable access.
pkgs/rust/[email protected]/tokenizers/src/utils/parallelism.rs:42 
    match std::env::var(ENV_VARIABLE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4f5a8061c52d11b — Filesystem access.
pkgs/rust/[email protected]/benches/bert_benchmark.rs:54 
    for line in BufReader::new(File::open(Path::new("data/big.txt")).unwrap()).lines() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #101dcdc5df9d09c0 — Filesystem access.
pkgs/rust/[email protected]/benches/bpe_benchmark.rs:39 
    for line in BufReader::new(File::open(Path::new("data/big.txt")).unwrap()).lines() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4353231703cd82e — Filesystem access.
pkgs/rust/[email protected]/benches/layout_benchmark.rs:30 
    for line in BufReader::new(File::open(Path::new("data/big.txt")).unwrap()).lines() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d020600eb34c8fe — Filesystem access.
pkgs/rust/[email protected]/benches/llama3.rs:8 
    let data = std::fs::read_to_string("data/big.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db52d779790c984f — Filesystem access.
pkgs/rust/[email protected]/benches/unigram_benchmark.rs:20 
    let content = read_to_string("data/small.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52e79565c32c89e9 — Filesystem access.
pkgs/rust/[email protected]/benches/unigram_benchmark.rs:46 
    let content = read_to_string("data/big.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #0cd2e74ff22baf15 — Filesystem access.
pkgs/rust/[email protected]/examples/encode_batch.rs:6 
    let data = std::fs::read_to_string("data/big.txt")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f1200fc83ea03cb — Filesystem access.
pkgs/rust/[email protected]/src/models/bpe/model.rs:321 
        let vocab_file = File::open(vocab)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0f1f2ebd9af8b5f — Filesystem access.
pkgs/rust/[email protected]/src/models/bpe/model.rs:341 
        let merge_file = File::open(merges)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ea63c91898c17dc — Filesystem access.
pkgs/rust/[email protected]/src/models/bpe/model.rs:535 
        let mut vocab_file = File::create(&vocab_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #116f2762e486d327 — Filesystem access.
pkgs/rust/[email protected]/src/models/bpe/model.rs:549 
        let mut merges_file = File::create(&merges_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd1da0871f205f74 — Filesystem access.
pkgs/rust/[email protected]/src/models/unigram/model.rs:379 
        let string = read_to_string(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2de2b616086e8e7 — Filesystem access.
pkgs/rust/[email protected]/src/models/unigram/model.rs:479 
        std::fs::write(&fullpath, string)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac7cca799f3f4b79 — Filesystem access.
pkgs/rust/[email protected]/src/models/wordlevel/mod.rs:119 
        let vocab_file = File::open(vocab_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c80429caea6453f — Filesystem access.
pkgs/rust/[email protected]/src/models/wordlevel/mod.rs:205 
        let mut vocab_file = File::create(&vocab_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1104f1f59117bd9 — Filesystem access.
pkgs/rust/[email protected]/src/models/wordpiece/mod.rs:162 
        let file = File::open(vocab)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccf9fa06e58766e0 — Filesystem access.
pkgs/rust/[email protected]/src/models/wordpiece/mod.rs:282 
        let mut vocab_file = File::create(&vocab_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62bc6d57161d6137 — Filesystem access.
pkgs/rust/[email protected]/src/tokenizer/mod.rs:1356 
            len += File::open(file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5577a08cf80de94c — Filesystem access.
pkgs/rust/[email protected]/src/tokenizer/mod.rs:1365 
                match File::open(filename) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69567ffc45d623c7 — Filesystem access.
pkgs/rust/[email protected]/src/tokenizer/mod.rs:1560 
        let mut file = File::create(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b5ce708f5ba2fe5 — Environment-variable access.
pkgs/rust/[email protected]/src/utils/parallelism.rs:22 
    std::env::var(ENV_VARIABLE).is_ok() || get_override_parallelism().is_some()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c790f20f3f8e137a — Environment-variable access.
pkgs/rust/[email protected]/src/utils/parallelism.rs:42 
    match std::env::var(ENV_VARIABLE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tokio

rust dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #849507816c64653b — Filesystem access.
pkgs/rust/[email protected]/src/fs/file.rs:154 
        let std = asyncify(|| StdFile::open(path)).await?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e87c9c210e2f477e — Filesystem access.
pkgs/rust/[email protected]/src/fs/file.rs:192 
        let std_file = asyncify(move || StdFile::create(path)).await?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24d650c77b886f8d — Filesystem access.
pkgs/rust/[email protected]/src/fs/read.rs:48 
    asyncify(move || std::fs::read(path)).await

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4dbe1fdeb62beefe — Filesystem access.
pkgs/rust/[email protected]/src/fs/read_to_string.rs:29 
    asyncify(move || std::fs::read_to_string(path)).await

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #200233ec6d246889 — Filesystem access.
pkgs/rust/[email protected]/src/fs/write.rs:30 
    asyncify(move || std::fs::write(path, contents)).await

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #859eb68dcf14d959 — Environment-variable access.
pkgs/rust/[email protected]/src/loom/std/mod.rs:95 
        match std::env::var(ENV_WORKER_THREADS) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tonic

rust dependency
expand_more 2 low-confidence finding(s)
low telemetry dependency Excluded from app score #0292ab0fe6f55f4e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/transport/service/reconnect.rs:105 
                                tracing::debug!("reconnect::poll_ready: {:?}", error);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #e536adfdfeb291a0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/transport/service/reconnect.rs:144 
            tracing::debug!("error: {}", error);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

tower

rust dependency
expand_more 4 low-confidence finding(s)
low telemetry dependency Excluded from app score #fc4fb648464e2b67 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/balance/p2c/test.rs:110 
                tracing::info!("using {}", c);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b6e8b0ba20b4b1e5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/buffer/worker.rs:59 
            tracing::debug!("buffer closing; waking pending tasks");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #34d6e16c8e3f32d9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/buffer/worker.rs:197 
                            tracing::debug!(service.ready = true, message = "processing request");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #8e8b8bc3ebdd68bd — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/buffer/worker.rs:216 
                            tracing::debug!({ %error }, "service failed");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

tower-http

rust dependency
expand_more 14 low-confidence finding(s)
low telemetry dependency Excluded from app score #efd2299908c61b5b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/catch_panic.rs:343 
            tracing::error!("Service panicked: {}", s);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #25e831f2004a9cf8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/catch_panic.rs:345 
            tracing::error!("Service panicked: {}", s);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #96a3b15d8cedf96e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/catch_panic.rs:347 
            tracing::error!(
                "Service panicked but `CatchPanic` was unable to downcast the panic info"
            );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #d03ccf792035cfdc — Filesystem access.
pkgs/rust/[email protected]/src/compression/layer.rs:136 
        let file = File::open("Cargo.toml").await.expect("file missing");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #333bdb568e090145 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/services/fs/serve_dir/mod.rs:414 
                    tracing::error!(error = %err, "Failed to read file");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #b459ffef4c11e0ac — Filesystem access.
pkgs/rust/[email protected]/src/services/fs/serve_dir/open_file.rs:209 
        match (File::open(&path).await, encoding) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b23358430605cefd — Filesystem access.
pkgs/rust/[email protected]/src/services/fs/serve_dir/tests.rs:30 
    let contents = std::fs::read_to_string("../README.md").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a2e29cb8c762b59 — Filesystem access.
pkgs/rust/[email protected]/src/services/fs/serve_dir/tests.rs:100 
    let contents = std::fs::read_to_string("../README.md").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e11e23dc5caa6bfb — Filesystem access.
pkgs/rust/[email protected]/src/services/fs/serve_dir/tests.rs:270 
    let contents = std::fs::read_to_string("Cargo.toml").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbf52f0e6e7828d8 — Filesystem access.
pkgs/rust/[email protected]/src/services/fs/serve_dir/tests.rs:476 
    let file_contents = std::fs::read("../README.md").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a6af2730eea0f26 — Filesystem access.
pkgs/rust/[email protected]/src/services/fs/serve_dir/tests.rs:516 
    let file_contents = std::fs::read("../README.md").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30fb07ffa0e0fb83 — Filesystem access.
pkgs/rust/[email protected]/src/services/fs/serve_dir/tests.rs:538 
    let file_contents = std::fs::read("../README.md").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17506b10872ce0b9 — Filesystem access.
pkgs/rust/[email protected]/src/services/fs/serve_dir/tests.rs:555 
    let file_contents = std::fs::read("../README.md").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db5b1540a19cd171 — Filesystem access.
pkgs/rust/[email protected]/src/services/fs/serve_dir/tests.rs:681 
    let contents = std::fs::read_to_string("../README.md").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tracing

rust dependency
expand_more 1 low-confidence finding(s)
low telemetry dependency Excluded from app score #e873e6bb486caf97 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/event.rs:7 
        b.iter(|| tracing::info!("hello world!"))

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

tracing-subscriber

rust dependency
expand_more 113 low-confidence finding(s)
low telemetry dependency Excluded from app score #5e52fe249bfb281e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:50 
                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #32d3365ad7736e8b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:51 
                tracing::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #23942e80e996fe36 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:52 
                tracing::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #6d0b70345d470726 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:63 
                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ea4d60220e52d94d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:64 
                tracing::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #74d780da8089098d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:65 
                tracing::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #64ca85f6ed776278 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:76 
                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #356b5f57aa4b82a1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:86 
                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #998523fd9aea1bdf — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:96 
                tracing::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #1dbf466f0021a715 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:114 
                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ba6b748726976d11 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:124 
                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b73bc42f0d8de776 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:136 
                        tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #de2e98d5fb64795b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:139 
                        tracing::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #2fc6cb07d04d28ab — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:142 
                        tracing::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #462a77f93c7962a8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:145 
                        tracing::warn!(target: "foo", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #cff87f227f6238f0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:164 
                        tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #1eef50eb9be1b43d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:167 
                        tracing::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #36a74ba717b5e10b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:170 
                        tracing::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #391d5303ae0a0c6d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:173 
                        tracing::warn!(target: "foo", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #c7d664e152ef7457 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:191 
                    tracing::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #027aa9e4309a4d9a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:192 
                    tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #c8928fa232f0b8de — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:195 
                    tracing::warn!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b4c61e506032f836 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:206 
                    tracing::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #d50260341e2c4ebf — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:207 
                    tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #d0ee3c239bbb9076 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:210 
                    tracing::warn!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #73569fdace295319 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:226 
                        tracing::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #9faf26f4ee26c46a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:231 
                        tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #cd8c3e4d2c967e4e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:236 
                        tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #649e00eafb9586cf — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:258 
                        tracing::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #dd76b045bfd4f606 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:263 
                        tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #a252eef2deb49019 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:268 
                        tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ba1d9db16f50671a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter.rs:291 
                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #32910e886ea652d7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:52 
                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #45ab2d08129d6c99 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:53 
                log::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #435ce8851758e210 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:54 
                log::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #56d79831a00bc0bd — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:65 
                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #63b0bc0efb379394 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:66 
                log::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #0b5708d2f9756fc7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:67 
                log::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #9771418110d1e920 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:78 
                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #a10985e8f1204566 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:88 
                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #117c04d4b91071ac — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:98 
                log::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #fecb8b1b4e9ad17d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:116 
                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #3d9cf51fc4a509be — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:126 
                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #48b84da8229dfc16 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:138 
                        log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #5889e5a0619b8ffd — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:141 
                        log::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #f48305a1b61f8f65 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:144 
                        log::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b0268a559a97f1e8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:147 
                        log::warn!(target: "foo", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #066553fbee6cb22f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:166 
                        log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #31d738cfcc0c2cc0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:169 
                        log::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #02110da147b16c70 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:172 
                        log::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b3c887e8af0c1126 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:175 
                        log::warn!(target: "foo", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #448d34aab4c45295 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:195 
                    log::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #be0a2049ec3e13bb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:196 
                    log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #4c4ccc4447c0e903 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:199 
                    log::warn!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #2f17651f44ef07e6 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:210 
                    log::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #cb7be93ec90a27eb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:211 
                    log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ffdd8412659ba570 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:214 
                    log::warn!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #3348154c506afa3f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:230 
                        log::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #aae1667b0fba22f0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:235 
                        log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #c3c1e8f67fb96b50 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:240 
                        log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #2522c60014fedd33 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:262 
                        log::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #078d63af6e73ad7a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:267 
                        log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #0362bb807755f6ab — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:272 
                        log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #67f1b1603ffd6d14 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/filter_log.rs:298 
                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #909c9943db0019d1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:103 
                        tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #0dcf4e76ca25de02 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:117 
                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ed52e5fb2b86f18f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:122 
                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #8d971a10e2188688 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:127 
                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ce9122b9d3b589ec — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:132 
                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #101fdcd16485bd7a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:150 
                            tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #94cf1258531c4595 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:171 
                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #59c2c4ca14ce552e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:179 
                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #56337c6b83e9ba4f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:187 
                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #862e0a076dc3c6a4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:195 
                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #9dfdfbeba811bcf8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:222 
                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #0e9b6fd6e911a2fc — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:230 
                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #98bb6b13aa600943 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:238 
                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #244d132cd3ca6488 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:246 
                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #dc0bf95224c2c8ce — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:276 
                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #41bb9d32c8fab46f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:289 
                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #065a7c9951972e2e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:302 
                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #0d740b55cc11a71d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/benches/fmt.rs:315 
                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #ecc3500dd1189979 — Environment-variable access.
pkgs/rust/[email protected]/src/filter/env/builder.rs:169 
        let var = env::var(self.env_var_name()).unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d029930d76244166 — Environment-variable access.
pkgs/rust/[email protected]/src/filter/env/builder.rs:178 
        let var = env::var(self.env_var_name()).unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5eccd814a8bc3c5d — Environment-variable access.
pkgs/rust/[email protected]/src/filter/env/builder.rs:186 
        let var = env::var(self.env_var_name())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3a7cf536871d1df — Environment-variable access.
pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:717 
        let ansi = cfg!(feature = "ansi") && env::var("NO_COLOR").map_or(true, |v| v.is_empty());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #de05d0a291966cd5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:1325 
            tracing::info!(?AlwaysError);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #2e5a5a1be18719e6 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:1363 
            tracing::info!(?AlwaysError);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #93ebc930a805e61c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:1523 
            tracing::info!(target: "writer2", "hello writer2!");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #27166a53fa988211 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:1526 
            tracing::warn!(target: "writer1", "hello writer1!");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #75018a76b80dc550 — Environment-variable access.
pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:1566 
        let _saved_no_color = RestoreEnvVar(env::var(NO_COLOR));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #f898b6d21790ff4c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/json.rs:586 
            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #83df5f3b6b7cffae — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/json.rs:614 
            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #8f39a06bb745f8c7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/json.rs:630 
            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #3406d6f61cdbc938 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/json.rs:646 
            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #61b427aeaa3f4400 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/json.rs:661 
            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b50f568b899b9c45 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/json.rs:676 
            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b569d40fa74fc3be — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/json.rs:698 
            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #4a1e4a51275202c4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/json.rs:711 
            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #e574a57c31c2c389 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/json.rs:727 
            tracing::info!("an event outside the root span");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #433a762cb32b4bd1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/json.rs:737 
            tracing::info!("an event inside the root span");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #a77b12acf54de025 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/mod.rs:1837 
        tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #eb3a922d7e5b13eb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/mod.rs:1856 
        tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #a90a007595664f9b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/mod.rs:1912 
        tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ff94abd1048fa3bf — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/mod.rs:1926 
        tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #3821dbcc429a79fb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/mod.rs:1953 
            tracing::info!(parent: &span2, "hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #c7bda20ff9e8593f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/mod.rs:1980 
            tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #83acdb7a4ae93ece — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/mod.rs:1983 
            tracing::info!(parent: &span2, "hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #cc64a084c9741fcb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/fmt/format/mod.rs:1990 
        tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #1f515c7ffc54134e — Environment-variable access.
pkgs/rust/[email protected]/src/fmt/mod.rs:1200 
        let targets = match env::var("RUST_LOG") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #b6d248c0bfee23dc — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/layer/tests.rs:143 
                tracing::info!("no span");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #a69c1eeb65318b38 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/layer/tests.rs:147 
                tracing::info!(parent: &parent, "explicit span");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #c44e3933531a321a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/layer/tests.rs:151 
                tracing::info!("contextual span");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

ureq

rust dependency
expand_more 11 low-confidence finding(s)
low egress tooling Excluded from app score unreachable #3e9cb22ed0d65071 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/examples/count-bytes.rs:24 
    agent.get("https://httpbin.org/bytes/123").call()?;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #c99f0f5506a45375 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/examples/count-bytes.rs:25 
    agent.get("https://httpbin.org/bytes/123").call()?;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #878f2f88f03841fb — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/examples/custom-tls.rs:15 
    let _response = agent.get("https://httpbin.org/").call();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #09c412ba6b9de01f — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/examples/ipv6.rs:29 
    let result = agent.get("https://www.google.com/").call();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unreachable #0b3bae86adb49ef1 — Filesystem access.
pkgs/rust/[email protected]/examples/smoke-test/main.rs:96 
    let file = std::fs::File::open(args.nth(1).unwrap())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unreachable #4eba68a5a8332259 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/examples/tls_config.rs:37 
    let response1 = agent1.get("https://httpbin.org/get").call().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unreachable #465d7cbd8c34d119 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/examples/tls_config.rs:55 
    let response2 = agent2.get("https://httpbin.org/get").call().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f76fc199814c4f1c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/lib.rs:578 
        let resp = agent.get("http://www.google.com/").call().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #eaf918cb2afbcbd7 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/lib.rs:591 
        let resp = agent.get("https://www.google.com/").call().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #da8ce7836bcccbc9 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/lib.rs:607 
        let resp = agent.get("https://www.google.com/").call().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4cba38a0ded92da3 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/request.rs:594 
        crate::agent()
            .post("http://example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

utoipa-swagger-ui

rust dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #a2a2dffbb0a5889f — Environment-variable access.
pkgs/rust/[email protected]/build.rs:17 
    let target_dir = env::var("OUT_DIR").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f274c71957595fb — Filesystem access.
pkgs/rust/[email protected]/build.rs:19 
    let swagger_ui_zip = File::open(
        ["res", &format!("{SWAGGER_UI_DIST_ZIP}.zip")]
            .iter()
            .collect::<PathBuf>(),
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e58d1cce9d014ef — Filesystem access.
pkgs/rust/[email protected]/build.rs:92 
    let mut swagger_initializer = fs::read_to_string(&path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #630d4979a34e00f1 — Filesystem access.
pkgs/rust/[email protected]/build.rs:97 
    fs::write(&path, replaced_swagger_initializer.as_ref()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a7ec2f7d0800c95 — Filesystem access.
pkgs/rust/[email protected]/build.rs:111 
    fs::write(&path, &contents).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • pillow prod — sdist exceeds byte cap
  • scipy prod — sdist exceeds byte cap
  • bitsandbytes prod — no sdist (wheels only)
  • torch prod — no sdist (wheels only)
  • torchvision prod — no sdist (wheels only)
  • triton prod — no sdist (wheels only)
  • text-generation-client prod — cdn 403
  • text-generation-router prod — cdn 403
  • grpc-metadata prod — cdn 403