Close Open Privacy Scan
App Privacy Score
Medium risk · 2923 finding(s)
Based on: 1 first-party package(s) · 24/31 deps analyzed
Dependency score: 42 (High risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz Confirmed data exfiltration in application code
External domains:
abseil.ioaclanthology.orgagentskills.ioaggregate.ee.engr.uky.eduapi.nuget.orgapp.neptune.aiarrow.apache.orgarxiv.orgbitbucket.orgblog.llamafactory.netbugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcdn-datasets.huggingface.cocdn-media.huggingface.cocdn.britannica.comcdn.jsdelivr.netcdn.mathjax.orgcens.ioc.eeclear.mlclip-cn-beijing.oss-cn-beijing.aliyuncs.comcolab.research.google.comcollaboration.cmc.ec.gc.cacommonmark.orgcran.r-project.orgcrates.iocreativecommons.orgcs-people.bu.educve.mitre.orgcyclopts.readthedocs.iodagshub.comdata-apis.orgdatatracker.ietf.orgdev-discuss.pytorch.orgdeveloper.android.comdeveloper.mozilla.orgdevelopers.google.comdigitalassets.lib.berkeley.edudiscuss.huggingface.codiscuss.python.orgdiscuss.pytorch.orgdl.fbaipublicfiles.comdmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.bodo.aidocs.h5py.orgdocs.neptune.aidocs.nvidia.comdocs.pydantic.devdocs.pytest.orgdocs.python.orgdocs.pytorch.orgdocs.ray.iodocs.rsdocs.scipy.orgdocs.sglang.aidocs.sqlalchemy.orgdocs.swanlab.cndocs.wandb.aidoi.orgdownload.pytorch.orgdvc.orgece.uwaterloo.caen.ig.maen.wikipedia.orgen.wikiversity.orgerrors.pydantic.devessentia.upf.eduexam_ple.comexslt.orgfarm4.staticflickr.comfastapi.tiangolo.comfate.ffmpeg.orgffmpeg.orgflyte.orgfonts.googleapis.comfoo.comgcc.gnu.orggiou.stanford.edugist.github.comgithub.comgitlab.freedesktop.orggraphics.stanford.edugroups.google.comguillaumejaume.github.iohelp.aliyun.comhf.cohips.hearstapps.comhost.comhtml.spec.whatwg.orghub-ci.huggingface.cohuggingface.cohypothesis.readthedocs.ioi.postimg.ccimageio.readthedocs.ioimages.cocodataset.orgimages.pexels.comipython.orgj3-fortran.orgjoschu.netjson-schema.orgjsonlines.orgk2-fsa.github.iolibsdl.orglists.sourceforge.netlive.ece.utexas.edullamafactory.readthedocs.iolocalhost.tiangolo.commathworld.wolfram.commatplotlib.orgmcp.api-inference.modelscope.netmedium.commesonbuild.commetacpan.orgmistralai.github.iomodelscope.cnmodelscope.oss-cn-beijing.aliyuncs.commypy.readthedocs.ionats.ionicolas.limare.netnineplanets.orgnlp.stanford.edunumba.readthedocs.ionumexpr.readthedocs.ionumpy.orgnumpydoc.readthedocs.ioonnxruntime.aiopenaipublic.azureedge.netopenaipublic.blob.core.windows.netopenreview.netoptuna.readthedocs.iopackages.msys2.orgpackaging.python.orgpaddle-model-ecology.bj.bcebos.compandas.pydata.orgpapers.nips.ccparquet.apache.orgpbs.twimg.compeople.eecs.berkeley.edupeps.python.orgpersonal.math.ubc.capillow.readthedocs.iopresbrey.mit.eduproceedings.neurips.ccprotobuf.devpyav.orgpydantic-docs.helpmanual.iopyinstaller.readthedocs.iopyperclip.readthedocs.iopypi.orgpython-devtools.helpmanual.iopytorch.orgpyyaml.orgqianwen-res.oss-cn-beijing.aliyuncs.comqwenlm.github.ioraw.githubusercontent.comrefspecs.linuxfoundation.orgrich.readthedocs.iorrc.cvc.uab.ess3.amazonaws.comsafetensors-convert.hf.spaceschemas.microsoft.comscikit-image.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgsethmlarson.devshunsukesaito.github.iosourceware.orgspdx.devspecs.frictionlessdata.iospherelab.aistackoverflow.comstarlette.devstorage.googleapis.comsuno-ai.notion.sitesupport.sas.comswagger.ioswanlab.cntest.pypi.orgtheaisummer.comthumbs.dreamstime.comtruststore.readthedocs.iotvm.apache.orgtwitter.comtyper.tiangolo.comtyping.python.orgunpkg.comviews.scientific-python.orgvision.middlebury.eduweave-docs.wandb.aiweb.archive.orgwixtoolset.orgwrapdb.mesonbuild.comwww.aclweb.orgwww.ams.orgwww.apache.orgwww.arxiv.orgwww.comet.comwww.cs.cmu.eduwww.danielpovey.comwww.deepmind.comwww.deepspeed.aiwww.dvc.orgwww.ecma-international.orgwww.example.珠宝www.ffmpeg.orgwww.github.comwww.gnu.orgwww.google.comwww.ilankelman.orgwww.intel.comwww.json.orgwww.kxan.comwww.llama.comwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.mlflow.orgwww.modelscope.cnwww.nature.comwww.oasis-open.orgwww.openblas.netwww.opm.govwww.paddleocr.aiwww.python.orgwww.scipy.orgwww.scratchapixel.comwww.stata.comwww.statsmodels.orgwww.stixfonts.orgwww.tensorflow.orgwww.w3.orgwww.wandb.comwww.xudongz.comwww.xyz.eduwww.youtube.comx.comxarray.pydata.orgxlrd.readthedocs.ioyou-seta.hf.space
- 1source
repo/src/llamafactory/chat/sglang_engine.py:163 - 2sink
repo/src/llamafactory/chat/sglang_engine.py:220
hub Dependency data flows (1)
- 1source
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 - 2sink
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514
</> First-Party Code
first-party (python)
python first-party response = requests.post(f"{self.base_url}/generate", json=json_data, stream=True)User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.
Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 178 low-confidence finding(s)
low env_fs — Environment-variable access. 118 locations
low env_fs — Filesystem access. 54 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 6 locations
</> Dependencies
accelerate
python dependency self.writer.track(value, name=key, step=step, **kwargs)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
self.writer.track(aim_image, name=key, step=step, **track_kw)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 226 low-confidence finding(s)
low env_fs — Filesystem access. 31 locations
low env_fs — Environment-variable access. 195 locations
modelscope
python dependency out = self.tracker.track(frame)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 737 low-confidence finding(s)
low env_fs — Filesystem access. 502 locations
pkgs/python/[email protected]/modelscope/models/cv/image_mvs_depth_estimation_geomvsnet/utils.py:101
pkgs/python/[email protected]/modelscope/models/cv/image_to_3d/ldm/modules/encoders/clip/clip.py:164
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:112
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:141
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:175
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:189
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:207
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:244
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:296
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:317
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:339
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:370
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:412
pkgs/python/[email protected]/modelscope/models/cv/nerf_recon_acc/dataloader/read_write_model.py:429
pkgs/python/[email protected]/modelscope/models/cv/object_detection/mmdet_ms/utils/checkpoint.py:550
pkgs/python/[email protected]/modelscope/models/cv/object_detection/mmdet_ms/utils/checkpoint.py:557
pkgs/python/[email protected]/modelscope/ops/image_control_3d_portrait/torch_utils/custom_ops.py:125
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 29 locations
low env_fs — Environment-variable access. 206 locations
pkgs/python/[email protected]/modelscope/models/cv/object_detection/mmdet_ms/utils/checkpoint.py:116
pkgs/python/[email protected]/modelscope/models/cv/object_detection/mmdet_ms/utils/checkpoint.py:139
pkgs/python/[email protected]/modelscope/models/multi_modal/videocomposer/videocomposer_model.py:100
pkgs/python/[email protected]/modelscope/models/multi_modal/videocomposer/videocomposer_model.py:101
transformers
python dependency logger.debug(f"[Kubeflow] Token file not found: {token_path}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 399 low-confidence finding(s)
low env_fs — Filesystem access. 249 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 13 locations
low env_fs — Environment-variable access. 136 locations
img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
av
python dependencyexpand_more 10 low-confidence finding(s)
low env_fs — Environment-variable access. 5 locations
response = urlopen(url)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
datasets
python dependencyexpand_more 77 low-confidence finding(s)
low env_fs — Filesystem access. 52 locations
low env_fs — Environment-variable access. 25 locations
fastapi
python dependencyexpand_more 70 low-confidence finding(s)
low env_fs — Filesystem access. 55 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 12 locations
os.environ["DYLD_FALLBACK_LIBRARY_PATH"] = "/opt/homebrew/lib"Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
fire
python dependencyexpand_more 13 low-confidence finding(s)
low env_fs — Environment-variable access. 11 locations
low env_fs — Filesystem access. 2 locations
numpy
python dependencyexpand_more 982 low-confidence finding(s)
low env_fs — Filesystem access. 618 locations
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57
low env_fs — Environment-variable access. 356 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
omegaconf
python dependencyexpand_more 6 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 3 locations
packaging
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
pandas
python dependencyexpand_more 29 low-confidence finding(s)
low env_fs — Filesystem access. 12 locations
low env_fs — Environment-variable access. 16 locations
return urllib.request.urlopen(*args, **kwargs) # noqa: TID251Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
peft
python dependencyexpand_more 12 low-confidence finding(s)
low env_fs — Filesystem access. 4 locations
low env_fs — Environment-variable access. 8 locations
protobuf
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Environment-variable access. 2 locations
with open(os.path.join('google', 'protobuf', '__init__.py')) as version_file:Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
pydantic
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 5 locations
pyyaml
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
safetensors
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
sentencepiece
python dependencyexpand_more 10 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
if os.getenv('PYTHON_ARCH', '') == 'ARM64':Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
tiktoken
python dependencyexpand_more 16 low-confidence finding(s)
low env_fs — Environment-variable access. 5 locations
low env_fs — Filesystem access. 8 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations
trl
python dependencyexpand_more 109 low-confidence finding(s)
low env_fs — Environment-variable access. 28 locations
low env_fs — Filesystem access. 61 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 20 locations
tyro
python dependencyexpand_more 12 low-confidence finding(s)
low env_fs — Environment-variable access. 4 locations
low env_fs — Filesystem access. 8 locations
uvicorn
python dependencyexpand_more 5 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 2 locations
Skipped dependencies
Production
- torch prod — no sdist (wheels only)
- torchvision prod — no sdist (wheels only)
- torchaudio prod — no sdist (wheels only)
- torchdata prod — no sdist (wheels only)
- gradio prod — sdist exceeds byte cap
- matplotlib prod — sdist exceeds byte cap
- scipy prod — sdist exceeds byte cap