Close Open Privacy Scan

link https://github.com/coqui-ai/TTS
bolt Snapshot: commit dbf1a08
science engine v3
schedule 2026-07-12T16:08:41.878349+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code. Dependency data flows are listed separately and do not affect this verdict.

App Privacy Score

97 /100
Low privacy risk

Low risk · 1040 finding(s)

Dependency score: 0 (High risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

3 high 7 medium 1030 low
First-party packages: 1
Dependency packages: 30
Ecosystem: python

swap_horiz Application data flows

No application data flows were found. See dependency data flows below.

hub Dependency data flows (3)
high transformers dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 → pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2561
high transformers dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 → pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2562
high transformers dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/utils/hub.py:178 → pkgs/python/[email protected]/src/transformers/utils/hub.py:178

</> First-Party Code

first-party (python)

python first-party
expand_more 68 low-confidence finding(s)
low env_fs production #78e43c3c9d39e065 — Filesystem access.
repo/TTS/__init__.py:3 
with open(os.path.join(os.path.dirname(__file__), "VERSION"), "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49fa933c9384f3d2 — Filesystem access.
repo/TTS/bin/compute_attention_masks.py:162 
        with open(metafile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5e451267f2acdcf — Filesystem access.
repo/TTS/bin/extract_tts_spectrograms.py:219 
    with open(os.path.join(output_path, metada_name), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8876fc7c0fe1b1f — Filesystem access.
repo/TTS/bin/remove_silence_using_vad.py:70 
        with open(os.path.join(args.output_dir, "filtered_files.txt"), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a82b1db03c90c6c — Filesystem access.
repo/TTS/demos/xtts_ft_demo/xtts_demo.py:75 
        self.log = open(self.log_file, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75fa72471cb8e63f — Filesystem access.
repo/TTS/demos/xtts_ft_demo/xtts_demo.py:105 
    with open(sys.stdout.log_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e619866fb343ad94 — Filesystem access.
repo/TTS/encoder/utils/prepare_voxceleb.py:97 
        with open(zip_filepath, "rb") as f_zip:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da41e6aa72186b15 — Filesystem access.
repo/TTS/tts/datasets/__init__.py:153 
    with open(metafile_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c38aa3e5ce314c16 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:21 
    with open(filepath, "r", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #456da932111d7d11 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:59 
    with open(filepath, "r", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b8eb5f6c9f3a97f — Filesystem access.
repo/TTS/tts/datasets/formatters.py:100 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc3aabf269cc9700 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:114 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a92496c268f3e64b — Filesystem access.
repo/TTS/tts/datasets/formatters.py:129 
    with open(txt_file, "r", encoding="ISO 8859-1") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06cf0f6430379b77 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:173 
        with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cc25cd173a3218a — Filesystem access.
repo/TTS/tts/datasets/formatters.py:197 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13d0ec9f4c871e47 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:211 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acddded9c94601f0 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:232 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76e164153e206b55 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:264 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6525c6e3fd45da38 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:278 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f5dc6a08bd1719a — Filesystem access.
repo/TTS/tts/datasets/formatters.py:292 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ace0fc8e7335379 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:305 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4b3361e2cbd5750 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:334 
        with open(meta_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fecd5462d9983972 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:364 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #041a8c648d14f586 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:382 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d06934443cd339f — Filesystem access.
repo/TTS/tts/datasets/formatters.py:429 
        with open(meta_file, "r", encoding="utf-8") as file_text:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67d3dc29512b5932 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:456 
        with open(meta_file, "r", encoding="utf-8") as file_text:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a4b3fc06837773f — Filesystem access.
repo/TTS/tts/datasets/formatters.py:478 
            with open(txt_file, "r", encoding="utf-8") as file_text:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0511f3d0c58652fd — Filesystem access.
repo/TTS/tts/datasets/formatters.py:496 
        with open(meta_file, "r", encoding="utf-8") as file_text:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a8063c1d1ebbbc9 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:509 
    with open(os.path.join(root_path, meta_files), "r", encoding="utf-8") as meta:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00b43eec093f09ff — Filesystem access.
repo/TTS/tts/datasets/formatters.py:549 
        with open(str(meta_file), "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2654f615dd271f75 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:566 
        with open(str(cache_to), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56e78e7744f18867 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:571 
    with open(str(cache_to), "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2eb92c60092399a1 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:579 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a23f843bf1605783 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:609 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac67eb92c67f8c23 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:622 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62eb4aa8813ca1f2 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:636 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6030c55b69f91090 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:649 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64a2e492e3bc8b52 — Filesystem access.
repo/TTS/tts/layers/bark/load_model.py:42 
    with open(fname, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d71fa14e5c9b1630 — Filesystem access.
repo/TTS/tts/layers/bark/load_model.py:54 
    with open(to_local_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e348c2fec87115d6 — Environment-variable access.
repo/TTS/tts/layers/tortoise/utils.py:7 
MODELS_DIR = os.environ.get("TORTOISE_MODELS_DIR", DEFAULT_MODELS_DIR)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #feaa65d33037839f — Filesystem access.
repo/TTS/tts/layers/xtts/zh_num2words.py:1169 
    with open(args.ifile, "r", encoding="utf8") as istream, open(args.ofile, "w+", encoding="utf8") as ostream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f16a04aef6b98c7c — Filesystem access.
repo/TTS/tts/models/vits.py:1748 
        with open(config_file, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07769e53b99b0318 — Filesystem access.
repo/TTS/tts/models/vits.py:1994 
        with open(vocab_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a9d020530cc89fc — Environment-variable access.
repo/TTS/tts/utils/text/belarusian/phonemizer.py:16 
        jar_path = os.environ["BEL_FANETYKA_JAR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3d45848d8b8ebef — Filesystem access.
repo/TTS/tts/utils/text/cmudict.py:98 
            with open(file_or_path, encoding="latin-1") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cbdddb58ce2e56e — Filesystem access.
repo/TTS/utils/download.py:95 
        with open(filepath, "rb") as file_obj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #836728d4360606da — Filesystem access.
repo/TTS/utils/download.py:100 
    with open(filepath, mode) as fpointer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3bb9131c3235eac — Filesystem access.
repo/TTS/utils/download.py:104 
    with open(filepath, "rb") as file_obj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7819c66bb2550f04 — Environment-variable access.
repo/TTS/utils/generic_utils.py:128 
    TTS_HOME = os.environ.get("TTS_HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21fa2ed9d0b74f1a — Environment-variable access.
repo/TTS/utils/generic_utils.py:129 
    XDG_DATA_HOME = os.environ.get("XDG_DATA_HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d695810d4e36657c — Filesystem access.
repo/TTS/utils/manage.py:318 
            with open(tos_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6207c3da92ee48ce — Environment-variable access.
repo/TTS/utils/manage.py:328 
            if os.path.exists(tos_path) or os.environ.get("COQUI_TOS_AGREED") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #961fc5e4cd7956a5 — Filesystem access.
repo/TTS/utils/manage.py:392 
                    with open(md5sum_file, mode="r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4e7b2fe51be1a85 — Filesystem access.
repo/TTS/utils/manage.py:539 
            with open(temp_zip_name, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b8db0a76a44ba8d — Filesystem access.
repo/TTS/utils/manage.py:574 
            with open(temp_tar_name, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1367e9fb151d87e5 — Filesystem access.
repo/TTS/utils/manage.py:606 
            with open(temp_zip_name, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9be4a83060c61f31 — Filesystem access.
repo/docs/source/conf.py:26 
with open("../../TTS/VERSION", "r") as ver:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bb239dfb8d77807 — Filesystem access.
repo/notebooks/dataset_analysis/analyze.py:46 
    with open(path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63d69e5be0a94e23 — Filesystem access.
repo/notebooks/dataset_analysis/analyze.py:95 
    with open(file_path, "w+", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cd383414da3c819 — Filesystem access.
repo/notebooks/dataset_analysis/analyze.py:159 
    with open(train_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be0fa76a19c86092 — Filesystem access.
repo/scripts/sync_readme.py:19 
    orig_content = readme_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c7ac5ca59672418 — Filesystem access.
repo/scripts/sync_readme.py:27 
    readme_path.write_text(new_content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e2ddaf2a8354566 — Filesystem access.
repo/setup.py:40 
with open(os.path.join(cwd, "TTS", "VERSION")) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb756e342e48ed93 — Filesystem access.
repo/setup.py:62 
requirements = open(os.path.join(cwd, "requirements.txt"), "r").readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91e8f483dd101aba — Filesystem access.
repo/setup.py:63 
with open(os.path.join(cwd, "requirements.notebooks.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7287bcd9bf32e52 — Filesystem access.
repo/setup.py:65 
with open(os.path.join(cwd, "requirements.dev.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6dcd32f5bb508402 — Filesystem access.
repo/setup.py:67 
with open(os.path.join(cwd, "requirements.ja.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c38e0cc5347ab0ca — Filesystem access.
repo/setup.py:71 
with open("README.md", "r", encoding="utf-8") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

transformers

python dependency
high pii_flow dependency Excluded from app score #98eee8ffc1ec1665 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2561 · flow /tmp/closeopen-f_aqgibr/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 → /tmp/closeopen-f_aqgibr/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2561 
            req = urllib.request.Request(url, data=data, headers=headers, method="POST")

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow dependency Excluded from app score #95c077f80b61ee7d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2562 · flow /tmp/closeopen-f_aqgibr/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 → /tmp/closeopen-f_aqgibr/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2562 
            with urllib.request.urlopen(req, timeout=5, context=self._get_ssl_context()) as resp:

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow dependency Excluded from app score #e8f721562d27b233 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/python/[email protected]/src/transformers/utils/hub.py:178 · flow /tmp/closeopen-f_aqgibr/pkgs/python/[email protected]/src/transformers/utils/hub.py:178 → /tmp/closeopen-f_aqgibr/pkgs/python/[email protected]/src/transformers/utils/hub.py:178 
        instance_data = httpx.get(os.environ["ECS_CONTAINER_METADATA_URI"]).json()

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 382 low-confidence finding(s)
low env_fs dependency Excluded from app score #35801c69fa11a68a — Filesystem access.
pkgs/python/[email protected]/setup.py:311 
        with open(target, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a74797edee170685 — Filesystem access.
pkgs/python/[email protected]/setup.py:331 
        long_description=open("README.md", "r", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c3bb3b57607894e — Filesystem access.
pkgs/python/[email protected]/src/transformers/audio_utils.py:320 
            with open(audio, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1925d2ca9e398a0e — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:176 
    with open(file_name, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dfad01daeb0b572 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:182 
    with open(file_name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77cb6f6e4f297f12 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:228 
    autofile = (repo_path / "src" / "transformers" / "models" / "auto" / "auto_mappings.py").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80b7e8b99c30fc61 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:246 
                file = (repo_path / "src" / "transformers" / "models" / "auto" / filename).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a238e166de880f2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:333 
    with open(toc_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c6cdd8041e9810c — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:392 
    with open(module_name, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3584a30e4f251b83 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:517 
            with open(original_test_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0c6cce4f68fb585 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:567 
    with open(new_module_folder / f"modular_{new_lowercase_name}.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e7e9f6145a5a40e — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:572 
    with open(new_module_folder / "__init__.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #489727dfd28c990d — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:589 
    with open(tests_folder / "__init__.py", "w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #276596f6a631fab2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:593 
        with open(tests_folder / filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2abc91146c34452c — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:598 
    with open(repo_path / "docs" / "source" / "en" / "model_doc" / f"{new_lowercase_name}.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cb174313046b23f — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/chat.py:363 
            with open(examples_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65d508b4ba0e0a52 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/chat.py:659 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e010dc2af84e535 — Filesystem access.
pkgs/python/[email protected]/src/transformers/configuration_utils.py:911 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7a7f92f13d0c95b — Filesystem access.
pkgs/python/[email protected]/src/transformers/configuration_utils.py:1115 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95807059a8bf33a5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:159 
        with open(model, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29da0f9aceb3abc3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:706 
        with open(self.original_tokenizer.vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de6feb31008086bf — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1713 
        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ef9f043ebe0d309 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1753 
        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66f10b4bfafce39c — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1843 
        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bacdfbd9cea20793 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:2003 
        with open(self.vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09885f04d6fa5d55 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:576 
        with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #beeece6212501f5c — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:580 
        with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #313cc6c186f7ca17 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:584 
        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50ec4014f41f93c3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:769 
    with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #feac0d06fd722329 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:772 
    with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #451638803c0c71fb — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:776 
        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bba72f6c244a64c6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/processors/squad.py:515 
        with open(
            os.path.join(data_dir, self.train_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50fc1b8a073a4ad0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/processors/squad.py:536 
        with open(
            os.path.join(data_dir, self.dev_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9bbe2486cafa7d5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/processors/utils.py:119 
        with open(input_file, "r", encoding="utf-8-sig") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c94b56f298b08e4e — Filesystem access.
pkgs/python/[email protected]/src/transformers/distributed/configuration_utils.py:86 
        with open(json_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8971e95489729796 — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:133 
    with open(module_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3ea7c2af8ad97dc — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:186 
    with open(filename, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55f96cf992d114ab — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:298 
        module_hash: str = hashlib.sha256(b"".join(bytes(f) + f.read_bytes() for f in module_files)).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84f50d6c88c7060f — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:341 
        source_files_hash.update(file_path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62e5d9f7fd48574b — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:813 
        with open(requirements, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #235ad933ede48149 — Filesystem access.
pkgs/python/[email protected]/src/transformers/feature_extraction_utils.py:611 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68900fc472071763 — Filesystem access.
pkgs/python/[email protected]/src/transformers/feature_extraction_utils.py:639 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9ef96a12d5161e1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1072 
        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cebfeebbc7d3140f — Filesystem access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1235 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49c77b5d2d699c3f — Filesystem access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1356 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d51f5ff074b0047b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1802 
        graph_mixing_supported = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT", "1") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d676f3c8573abb9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1803 
        distributed = int(os.environ.get("WORLD_SIZE", "1")) > 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a575d1877e459958 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1808 
            os.environ.setdefault("NCCL_GRAPH_MIXING_SUPPORT", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b68f8aca1e89116d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/continuous_batching/distributed.py:160 
        graph_mixing_not_disabled = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT") != "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4a1640bfff6330a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/utils.py:2144 
            os.environ["TOKENIZERS_PARALLELISM"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce31f6e9b05c3fe5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/hf_argparser.py:333 
                    file_args += args_file.read_text().split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c76df4565dfc8c02 — Filesystem access.
pkgs/python/[email protected]/src/transformers/hf_argparser.py:403 
        with open(Path(json_file), encoding="utf-8") as open_json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36b7ca4945643611 — Filesystem access.
pkgs/python/[email protected]/src/transformers/hf_argparser.py:425 
        outputs = self.parse_dict(yaml.safe_load(Path(yaml_file).read_text()), allow_extra_keys=allow_extra_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e49b4890e983f87 — Filesystem access.
pkgs/python/[email protected]/src/transformers/image_processing_base.py:417 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c835a7c2e19842d — Filesystem access.
pkgs/python/[email protected]/src/transformers/image_processing_base.py:445 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a297f9454622a4f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/accelerate.py:115 
                local_rank = int(os.environ.get("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f21ddf10ec9b6de4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/finegrained_fp8.py:254 
        and os.environ.get("TRANSFORMERS_DISABLE_DEEPGEMM_LINEAR", "0") != "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #837e8825cd33c099 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/fsdp.py:51 
            and strtobool(os.environ.get("ACCELERATE_USE_FSDP", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86b44c8ce5e89750 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/fsdp.py:52 
            and strtobool(os.environ.get("FSDP_CPU_RAM_EFFICIENT_LOADING", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b24a0f6e93957bbb — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/hub_kernels.py:80 
    _TRANSFORMERS_USE_HUB_KERNELS = os.environ.get("USE_HUB_KERNELS", "YES").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c34d28483dbe3b0b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:40 
if os.getenv("WANDB_MODE") == "offline":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95fda62e78ed30f3 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:176 
    if os.getenv("DISABLE_MLFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d63b5a2d1f79c227 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:212 
    if os.getenv("DISABLE_KUBEFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1aae52d80cac8dd — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:214 
    return os.getenv("KUBEFLOW_TRAINER_SERVER_URL") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a54dee8307c27f00 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:436 
    ray_scope = os.getenv("RAY_SCOPE", "last")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7deaa5099f2bfed — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:602 
        self.logging_dir = os.getenv("TENSORBOARD_LOGGING_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7aecd0a3b8d14748 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:664 
    with open(f"{output_dir}/model_architecture.txt", "w+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81bd44751c0f0050 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:709 
        self._log_model = WandbLogModel(os.getenv("WANDB_LOG_MODEL", "false"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b95b7de81e2409e1 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:763 
                    project=os.getenv("WANDB_PROJECT", "huggingface"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bce9bdd8ffeb0cd — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:775 
            _watch_model = os.getenv("WANDB_WATCH", "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f4ffc86f34eefa7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:815 
                                fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f84e56453b71fe14 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:878 
                            fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d15bd7b182f05a74 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1170 
        log_assets = os.getenv("COMET_LOG_ASSETS", "FALSE").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #258c5c744cf48aaf — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1174 
            comet_old_mode = os.getenv("COMET_MODE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6670caad8ce6c89c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1334 
        self._log_artifacts = os.getenv("HF_MLFLOW_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d474a983a458b2f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1335 
        self._nested_run = os.getenv("MLFLOW_NESTED_RUN", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de9420ad5aad2cf4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1336 
        self._tracking_uri = os.getenv("MLFLOW_TRACKING_URI", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #687623cab1636582 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1337 
        self._experiment_name = os.getenv("MLFLOW_EXPERIMENT_NAME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9488f9e98841a42e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1338 
        self._flatten_params = os.getenv("MLFLOW_FLATTEN_PARAMS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02e81a181513f3cb — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1339 
        self._run_id = os.getenv("MLFLOW_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4049534434612194 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1340 
        self._max_log_params = os.getenv("MLFLOW_MAX_LOG_PARAMS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cf8084f4fd1d616 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1403 
            mlflow_tags = os.getenv("MLFLOW_TAGS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dabc4d3fb6f6b90a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1487 
        self.log_artifacts = os.getenv("HF_DAGSHUB_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4cfb98ca9db98e9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1488 
        self.name = os.getenv("HF_DAGSHUB_MODEL_NAME") or "main"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f59de87ef47f93d7 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1489 
        self.remote = os.getenv("MLFLOW_TRACKING_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e5f4dba7e52b455 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1493 
            branch=os.getenv("BRANCH") or "main",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0cc3c062e98c72ed — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1908 
                    self._log_model = os.getenv(
                        "CLEARML_LOG_MODEL",
                        "FALSE" if not ClearMLCallback._task_created_in_callback else "TRUE",
                    ).upper() in ENV_VARS_TRUE_VALUES.union({"TRUE"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #047b521502f4563d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1915 
                        project_name=os.getenv("CLEARML_PROJECT", "HuggingFace Transformers"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7918e7b938227d96 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1916 
                        task_name=os.getenv("CLEARML_TASK", "Trainer"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e358797fe2eb3476 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1920 
                    self._log_model = os.getenv("CLEARML_LOG_MODEL", "TRUE").upper() in ENV_VARS_TRUE_VALUES.union(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b971fa0c71e8db99 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2189 
            log_model_env = os.getenv("HF_DVCLIVE_LOG_MODEL", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b155af053a9e370e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2271 
        self._log_model = os.getenv("SWANLAB_LOG_MODEL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36ceab61b32afee6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2342 
            init_args["project"] = os.getenv("SWANLAB_PROJECT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01da64d464c93761 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2344 
            run_id = os.getenv("SWANLAB_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #630025ff1926b7c3 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2348 
            resume = os.getenv("SWANLAB_RESUME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88387ae0d2009502 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2494 
        ca_file = os.environ.get(self._ENV_CA_CERT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d645fef83f741386 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 
        token_path = os.environ.get(self._ENV_TOKEN_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6babb2a9807b166 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2518 
            with open(token_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad9a73224a68ed37 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 
            url = os.environ.get(self._ENV_SERVER_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7071f43ab2864297 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/mxfp4.py:417 
        rank = int(os.environ.get("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77250006d70efad4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/npu_flash_attention.py:30 
SPARSE_MODE = int(os.getenv("NPU_FA2_SPARSE_MODE", default=DOWN_RIGHT_ALIGNED_CAUSAL_MASK_MODE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0dfcb2f86ab32744 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/peft.py:708 
        with open(_adapter_model_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6502c90963c5677d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:77 
                rank = int(os.environ["RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32e3daa79d9cb769 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:78 
                local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #785b073e5e1e9cc4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:79 
                world_size = int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e60c3027e9b2730a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:103 
            current_device.set_device(int(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8df27df95b19bec7 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:122 
        device_map = torch.device(f"{device_mesh.device_type}:{int(os.environ['LOCAL_RANK'])}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af86e9d440201ada — Filesystem access.
pkgs/python/[email protected]/src/transformers/model_debugging_utils.py:243 
    with open(full_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad8fab8b271fc27f — Filesystem access.
pkgs/python/[email protected]/src/transformers/model_debugging_utils.py:266 
    with open(summary_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c20597d386dec391 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_flash_attention_utils.py:655 
            deterministic if deterministic is not None else os.getenv("FLASH_ATTENTION_DETERMINISTIC", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d06064651597c9e3 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:163 
XLA_USE_BF16 = os.environ.get("XLA_USE_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf0490d6f11b6d53 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:164 
XLA_DOWNCAST_BF16 = os.environ.get("XLA_DOWNCAST_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9230bf9a054dc52a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:213 
    return _is_torch_distributed_initialized() and int(os.environ.get("LOCAL_RANK", "-1")) == 0

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #557cb514308e791e — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:323 
        with open("/proc/mounts", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3be62339a4afa360 — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:356 
            with open(checkpoint_path, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a231a71083564f83 — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:3617 
            with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f67f430fcebec57 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:4180 
        if device_map == "auto" and int(os.environ.get("WORLD_SIZE", "0")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f754814c5ae09e81 — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:4482 
                        with open(file, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #389491a153a2a90a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/auto_factory.py:311 
                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b6d8e3342de7043 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/processing_auto.py:273 
                with open(tokenizer_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d8725e839722388 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:434 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f4b62cab2e6582a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:441 
    with open(merges_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1234b452c9aef2b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:612 
    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87f8d42435a5d570 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bark/processing_bark.py:101 
                with open(speaker_embeddings_path) as speaker_embeddings_json:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a176c5aceeb77caa — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bark/processing_bark.py:161 
            with open(os.path.join(save_directory, speaker_embeddings_dict_path), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78575e369c4615b0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:133 
        with open(monolingual_vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4abccdb53f7a869 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:306 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2dae0fbe1decc0e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:315 
            with open(out_monolingual_vocab_file, "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79185d9e841709b7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert.py:33 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22a8a38861e1a888 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert_legacy.py:32 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #280890d4c5855492 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert_legacy.py:245 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c719922e3605cdcf — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:41 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97b81a8a655b8dc4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:278 
            with open(vocab_file, "wb") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2331d8fa1372f2cb — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:282 
            with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb6eafe81edb7a64 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:142 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c6ea31c190ca9f9 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:316 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #496ac3ef581e2490 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:324 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9344266bd01639c8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:338 
                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f91d0599cfae4c60 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:116 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab53854f9d7daa6f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:119 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3b72a3b713788fe — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:293 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35d258d1bc99fb19 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:297 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f92dcd85a64b3adc — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:89 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dea8cf30b74be01b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:92 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54f5b6b1a3f5ac28 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:203 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90b3a908fcc31c10 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:207 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f71346c036949825 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/clvp/tokenization_clvp.py:149 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2181b0309d28dd71 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/clvp/tokenization_clvp.py:155 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #944963e92c1810c2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/cpm/tokenization_cpm.py:324 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #baf5d74783a0b388 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/cpmant/tokenization_cpmant.py:37 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5d7901fe0cc9f59 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/cpmant/tokenization_cpmant.py:219 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5deffaabc0792cb — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/ctrl/tokenization_ctrl.py:128 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b1af817ba958f4c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/ctrl/tokenization_ctrl.py:131 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #778ab0a8f51b828e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/esm/openfold_utils/residue_constants.py:417 
    stereo_chemical_props = resources.read_text("openfold.resources", "stereo_chemical_props.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #914ffe682f4ef9c0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/esm/tokenization_esm.py:28 
    with open(vocab_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd414185473337cf — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/esm/tokenization_esm.py:136 
        with open(vocab_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b82a8fe5d287b097 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:65 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74d779140e3b608b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:163 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7a0c1e71e59d1e9 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:237 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a15b93cb958df310 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:240 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9af4fa0fbabb184 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:498 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #592226465bbff6be — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:502 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4496d3f69a31ca56 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:204 
        with open(src_vocab_file, encoding="utf-8") as src_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b00a57f0889925ff — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:206 
        with open(tgt_vocab_file, encoding="utf-8") as tgt_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6415d97196bcd6a2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:209 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4004b0654683650 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:446 
        with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c08349793019f728 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:449 
        with open(tgt_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52166b8bd27dd25a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:454 
        with open(merges_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62eda5d74741cab7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:35 
    with open(emoji_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7c5a32944f79048 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:41 
    with open(vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04698b7d5a439ad1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:180 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b55af60c17e1c085 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:190 
        with open(emoji_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9099ec0c85574db — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/luke/tokenization_luke.py:287 
            with open(entity_vocab_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26a5ac049247794d — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:311 
            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a60a6a3eacd8b08 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:375 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d94b47b011fb56d8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:380 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edfef901cb952987 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:352 
                with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcbca17cef733dd8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:416 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c68fcd48c01cb4a3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:421 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ac9d1dd681585f6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:598 
        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14f9377ba2f415c1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:651 
    with open(tracker_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c73d7a13e69bfb6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mgp_str/tokenization_mgp_str.py:53 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7384f6b619158b24 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mgp_str/tokenization_mgp_str.py:97 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acf0cd7f135aa699 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mluke/tokenization_mluke.py:308 
            with open(entity_vocab_file, encoding="utf-8") as entity_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb9211f26e1a98c7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mluke/tokenization_mluke.py:1713 
        with open(entity_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #709b69968c167d61 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:46 
            with open(rewriting_rules, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4af6ba8261ec6778 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:195 
        self.byte_maps = json.load(open(vocab_file, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acb3bad21dec24db — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:373 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a81653407d21fccf — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/oneformer/image_processing_oneformer.py:95 
    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94e8cfe09c2d4f20 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/oneformer/image_processing_pil_oneformer.py:241 
    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #606d0c8766d46a2e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:126 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3f72d0df2f586ad — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:310 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c93956433c6fd71 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:331 
                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fd356fd41353e98 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/pop2piano/tokenization_pop2piano.py:111 
        with open(vocab, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7f4dd0164b01cd0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/pop2piano/tokenization_pop2piano.py:358 
        with open(out_vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aef0cfe69a2b46a3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/prophetnet/tokenization_prophetnet.py:259 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8e9a2f3dd015aa7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/prophetnet/tokenization_prophetnet.py:438 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95e033e1eeee38e6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:134 
        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5666abb9c203ab99 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:141 
        with open(passages_path, "rb") as passages_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80f128c352d02f33 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:150 
        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #043246fe7d59d4e2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:157 
        with open(resolved_meta_path, "rb") as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #390d84387bf21039 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:52 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51553f271cb955d6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:139 
        with open(word_shape_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcbef4ea9a378df8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:142 
        with open(word_pronunciation_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e5036105690049a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1077 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43efeea505499f1b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1088 
        with open(word_shape_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #364a5dcf00660d96 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1091 
        with open(word_pronunciation_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37c0ed45b3eeca11 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/siglip/tokenization_siglip.py:345 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4f9dc1281ec5871 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:271 
            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5aef0a969f5a53b6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:285 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3a3b94a6aff0fb0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:290 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb1f8d1e11732088 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/splinter/tokenization_splinter.py:33 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3104446050fea04 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/tapas/tokenization_tapas.py:91 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d73b072244826e19 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/tapas/tokenization_tapas.py:394 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0fe7dfde27fafbc — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/vits/tokenization_vits.py:83 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #372c298c5042dc37 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/vits/tokenization_vits.py:242 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #845235c35833bee5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:154 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80f99ca2b75c187d — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:647 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #565aead38927f99f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:138 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #262a355fa8e6cc19 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:575 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be17c72e86fd4936 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:266 
            with open(normalizer_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c64245efa68cd45f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:560 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c27af787d45770c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:563 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f15b81c6d7a90ea3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:568 
            with open(normalizer_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a923b787a28731ac — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:244 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b22a90bb2e0eeb4c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:247 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10277a7111f56cd2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:541 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5dc70e86ed2bc1b0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:545 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6c5dddfab14c16a — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/__init__.py:921 
                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b6a395519f97179 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/audio_classification.py:174 
                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #481d75689154df61 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/automatic_speech_recognition.py:352 
                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f79aeccc14906d27 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:457 
        with open(binary_path, "wb+") as f_output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5569f8fa8cd686f6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:520 
        with open(self.input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f81119ab1d38b74e — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:535 
        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9fde70b14aa7e01 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:563 
        with open(input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8eac3f9847186d00 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:580 
        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ae6bd703cf53e4c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1193 
        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7368e90194e3ad1c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1195 
            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3f157831ae205a0 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1313 
        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0197faaf31580c0e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1315 
            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #884c4ae0d2325fe6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/zero_shot_audio_classification.py:111 
                with open(audio, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04a5dc2f7f660f2b — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1086 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36f27799cf983e0b — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1166 
            with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0705709062245f81 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1174 
                    with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ba1952c5b4f0c17 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1183 
                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #029f8f96c2d183f8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1371 
            with open(resolved_chat_template_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5f713f5c964cbb8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1383 
                template_name: open(template_file, "r", encoding="utf-8").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4314f6703a594f1c — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1387 
                with open(resolved_raw_chat_template_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #937ff728492e0143 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1402 
                with open(resolved_processor_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #774c9deed67bcd2e — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1428 
                reader = open(resolved_audio_tokenizer_file, "r", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #992c7ab05594f487 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:288 
        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #767c8239688448ad — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:304 
        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97d55456ac13090c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1092 
    if "TRANSFORMERS_TEST_BACKEND" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa6baef0393112dd — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1093 
        backend = os.environ["TRANSFORMERS_TEST_BACKEND"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #857b9be49f175dc6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1102 
    if "TRANSFORMERS_TEST_DEVICE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bca5404eabb042c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1103 
        torch_device = os.environ["TRANSFORMERS_TEST_DEVICE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a780876a34961a30 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2165 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c26aa886620534ff — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2287 
            for k in list(os.environ.keys()):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5921e548f15bcb0 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2289 
                    del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a9a296951c8e3f9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2300 
    return mock.patch.dict(os.environ, kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #beb0a33488d5e137 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2315 
    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c422cd081a61f37c — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2417 
        with open(report_files["durations"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af73933192ab2f3e — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2447 
    with open(report_files["failures_long"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27da7c3e23942f29 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2452 
    with open(report_files["failures_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afff905f6c5544bb — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2457 
    with open(report_files["failures_line"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72750430aaf755cb — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2461 
    with open(report_files["errors"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7eb1e6fe6ff4ec1f — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2465 
    with open(report_files["warnings"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60e24faaf2bf544f — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2479 
    with open(report_files["summary_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e172b13c71adb3c — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2483 
    with open(report_files["stats"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30e4c09d94ce0f51 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2583 
    worker = os.environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b61a6f945f78796 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2630 
    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6abd4bc82d5d3f20 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2832 
        timeout = int(os.environ.get("PYTEST_TIMEOUT", "600"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae78970251fe432d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2868 
        if os.getenv("_INSIDE_SUB_PROCESS", None) == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79fe512c248879d8 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2871 
            test = " ".join(os.environ.get("PYTEST_CURRENT_TEST").split(" ")[:-1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05770d22c7b1c8d3 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2873 
                env = copy.deepcopy(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11ab9ac3a53b1fef — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2990 
    skip_cuda_tests: bool = os.environ.get("SKIP_CUDA_DOCTEST", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d3e9fefee5e2d58 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3228 
    if "TRANSFORMERS_TEST_DEVICE_SPEC" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de9f12d921991c0e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3229 
        device_spec_path = os.environ["TRANSFORMERS_TEST_DEVICE_SPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f504a93c8f7f42c4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3252 
        if "TRANSFORMERS_TEST_DEVICE" in os.environ and torch_device != device_name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eaf81dd1afe8e989 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3453 
    force_fullgraph = os.environ.get("TORCH_COMPILE_FORCE_FULLGRAPH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78f28bd6165871f5 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3476 
    full_test_name = os.environ.get("PYTEST_CURRENT_TEST", "").split(" ")[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df36934278f4ca07 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3556 
    with open(actual_test_file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e042f149fca6458 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3562 
    with open(caller_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #379a4eb1881da97e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3650 
    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9fee2dbe51abb18 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3652 
    with open(p, "a") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76b9b67ed6335176 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3769 
        if not os.environ.get("PYTEST_CURRENT_TEST", ""):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #187b1565cd2b291f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3806 
            if os.getenv("CI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4686351fcc10a246 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3882 
    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bbd91926ca2fc54 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4236 
    with open(file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01758355441b71ba — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4241 
    with open(file, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53693b5ec279d276 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4477 
            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #332f6e82024e8871 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4486 
            with open(new_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b50dac3f181cc6a — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_python.py:1397 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec51f689432eabae — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_python.py:1406 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26be94e01cdab882 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1661 
                    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20653a74242d00e0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1780 
            with open(tokenizer_config_file, encoding="utf-8") as tokenizer_config_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0a6aa19221f61be — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1799 
            with open(chat_template_file, encoding="utf-8") as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6f0974cc85f6f9d — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1806 
            with open(template_file) as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ed3b58c961b0f10 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1875 
                with open(special_tokens_map_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #140f47d40442d8e6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1905 
                with open(added_tokens_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfb46fe452368bb1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1918 
                with open(tokenizer_file, encoding="utf-8") as tokenizer_file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b27ee1fa0ae7776 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:2123 
        with open(tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5540cdf751afe51 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:2176 
            with open(added_tokens_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddf011411c04258f — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3314 
            with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c58d8b592db2340 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3325 
                    with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6981dbb6072eaacb — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3335 
                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ab6079e9382eccc — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3608 
            with open(resolved_vocab_file, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0779d80a60d5acd — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3634 
                with open(resolved_vocab_txt, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc04fc80a3f6b89a — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3660 
            with open(resolved_merges_file, "r", encoding="utf-8") as mf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad2c5c9248dd1450 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_sentencepiece.py:260 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d317fb3937c9b29c — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_tokenizers.py:121 
            with open(fast_tokenizer_file, encoding="utf-8") as tokenizer_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #784aa48b03930ba4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_tokenizers.py:1335 
                with open(_config_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43fbf6ef8cd4af98 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer.py:2459 
                model, device_ids=[int(os.getenv("SMDATAPARALLEL_LOCAL_RANK"))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #818b53db00b537fb — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer.py:4016 
        with open(model_card_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6835bc8a35ae61d5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer.py:4121 
                with open(index_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73db264fc5907861 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_callback.py:146 
        with open(json_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e259453be370744 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_callback.py:152 
        with open(json_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #552b7dcf58dbc0c3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_jit_checkpoint.py:60 
            with open(sentinel_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d89b46c939bbd277 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:943 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15dd90cdc53cc469 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:949 
            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45f03704c5be19b2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:955 
        with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a2eb3fb7e7cc14f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:166 
        os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #234524973b0ed92a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:167 
        os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c55bcb93ef98de2 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:169 
        os.environ["ASCEND_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d961f146d53ebcab — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:170 
        os.environ["HCCL_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d32327ed51f8b0d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:172 
        os.environ["FLASH_ATTENTION_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36eacae557211412 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:1094 
    with open(load_index, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72e0d232377ff7ea — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:86 
    if os.environ.get("TORCHELASTIC_RUN_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61c98060947342dd — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1554 
        self.mixed_precision = os.environ.get("ACCELERATE_MIXED_PRECISION", "no")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba7ea64bd512a0d2 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1572 
                os.environ["ACCELERATE_DYNAMO_BACKEND"] = self.torch_compile_backend

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2eac9fb8d0907b7 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1574 
                    os.environ["ACCELERATE_DYNAMO_MODE"] = self.torch_compile_mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57575ea7d89fffe4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1646 
        elif strtobool(os.environ.get("ACCELERATE_USE_DEEPSPEED", "false")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44ea2785260911be — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1806 
        if self.use_cpu or strtobool(os.environ.get("ACCELERATE_USE_CPU", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bee2dc5bf6caf73 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1830 
                os.environ["ACCELERATE_USE_DEEPSPEED"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6036e899397271c7 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1833 
                del os.environ["ACCELERATE_USE_DEEPSPEED"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac173c1e891ddabc — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1876 
                    "cuda:0" if torch.cuda.is_available() else os.environ.get("ACCELERATE_TORCH_DEVICE", "cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed3c75b1546a4253 — Filesystem access.
pkgs/python/[email protected]/src/transformers/training_args.py:2691 
            with open(self.fsdp_config, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a74abcd6b6bea766 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:2758 
        os.environ["FSDP_CPU_RAM_EFFICIENT_LOADING"] = cpu_ram_efficient_loading

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #3022f0bca4eaf38e — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/transformers/utils/attention_visualizer.py:183 
            img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #228623aa75355b22 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/generic.py:379 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8695a03282b50d3d — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/generic.py:862 
        with open(pretrained_model_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70245c70d0a3e5e5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/generic.py:868 
        with open(os.path.join(pretrained_model_path, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51ef3c21fc85c0cf — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:107 
HF_MODULES_CACHE = os.getenv("HF_MODULES_CACHE", os.path.join(constants.HF_HOME, "modules"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc9acf52d1ee2058 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:178 
        instance_data = httpx.get(os.environ["ECS_CONTAINER_METADATA_URI"]).json()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6a233488fc3796e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:185 
    sagemaker_params = json.loads(os.getenv("SM_FRAMEWORK_PARAMS", "{}"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a436ee9f680f12e1 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:187 
    training_job_arn = os.getenv("TRAINING_JOB_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ba7aef3e1b58e28 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:191 
        "sm_framework": os.getenv("SM_FRAMEWORK_MODULE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6748913bfd23cee3 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:192 
        "sm_region": os.getenv("AWS_REGION", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d645dfadb145e986 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:193 
        "sm_number_gpu": os.getenv("SM_NUM_GPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #959c34ddfdd5a57a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:194 
        "sm_number_cpu": os.getenv("SM_NUM_CPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b8649f79cac9e8b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:215 
    if os.environ.get("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8001bae1fb726d08 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:879 
    with open(index_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f48bf70039f8fe46 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:118 
    return os.getenv(env_variable, "false").lower() in ("true", "1", "y", "yes", "on")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b05fa65df2c5c02 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:123 
    return os.getenv(env_variable, "true").lower() in ("false", "0", "n", "no", "off")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ebd022236586da6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:130 
USE_TORCH_XLA = os.environ.get("USE_TORCH_XLA", "1").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce3f075fd54b9336 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:347 
    pytorch_cndev_based_mlu_check_previous_value = os.environ.get("PYTORCH_CNDEV_BASED_MLU_CHECK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d9e0662424d6e3e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:349 
        os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = str(1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #596ecab8daed9588 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:353 
            os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = pytorch_cndev_based_mlu_check_previous_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #139ddc1a983d86b9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:355 
            os.environ.pop("PYTORCH_CNDEV_BASED_MLU_CHECK", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58f6c5cc928dfde8 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:425 
    if os.environ.get("PT_HPU_LAZY_MODE", "1") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef2ead914cf2bfed — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1603 
    if os.getenv("TRANSFORMERS_DISABLE_TORCH_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8707f1a79fcf81f6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1652 
        if "DATABRICKS_RUNTIME_VERSION" in os.environ and os.environ["DATABRICKS_RUNTIME_VERSION"] < "11.0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c735f40577963ba — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1664 
    sagemaker_params = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0241dffab396d4f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1678 
    smp_options = os.getenv("SM_HP_MP_PARAMETERS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21139365f07f7e6d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1688 
    mpi_options = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eeef30fe368bb161 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1701 
    return "SAGEMAKER_JOB_NAME" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bcbd6ab9306aeeb — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:2813 
        with open(os.path.join(module_path, module_name), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c31f88c77cdb1cfa — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:64 
    env_level_str = os.getenv("TRANSFORMERS_VERBOSITY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #318297f597af2ac5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:94 
            sys.stderr = open(os.devnull, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a398d94e7d3cf860 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:108 
        if os.getenv("TRANSFORMERS_VERBOSITY", None) == "detail":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb3f0a9cbaa42d57 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:114 
        ci = os.getenv("CI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #283c32e729f9cbd6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:322 
    no_advisory_warnings = os.getenv("TRANSFORMERS_NO_ADVISORY_WARNINGS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd929b75b706e55e — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:172 
        Path(dump_path).write_text(json.dumps(records), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20d71c0d88de7d6f — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:182 
                records = json.loads(Path(record_file).read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d35ca36ab8e1d6e8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:327 
        report_path.write_text(json.dumps(self.build_report(), indent=2, sort_keys=True), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd9f46642c6cf1d4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:338 
    enabled_raw = os.environ.get("NETWORK_DEBUG_REPORT", "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c481e8dedc7e8176 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:344 
    output_path = os.environ.get("NETWORK_DEBUG_REPORT_PATH", "").strip() or _DEFAULT_REPORT_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a27a4439121e7869 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/notebook.py:128 
        if "VSCODE_PID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff1795d3c82a2756 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/pytest_helpers.py:39 
    data = json.loads(p.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f11553bc275a03ae — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/quantization_config.py:144 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a2b6f8186e1a037 — Filesystem access.
pkgs/python/[email protected]/src/transformers/video_processing_utils.py:769 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03a3068be38ddb82 — Filesystem access.
pkgs/python/[email protected]/src/transformers/video_processing_utils.py:789 
        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

trainer

python dependency
medium telemetry dependency Excluded from app score #9648e02ed78c70ba — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:66 
        self.run.track(value, name=title, step=step, context=self.context)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #6df1a286fa692a5b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:69 
        self.run.track(
            Text(text),  # Pass a string you want to track
            name=title,  # The name of distributions
            step=step,  # Step index (optional)
            context=self.context,
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #f9fa000127d11003 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:77 
        self.run.track(
            Image(figure, title),  # Pass image data and/or caption
            name=title,  # The name of image set
            step=step,  # Step index (optional)
            context=self.context,
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #c9430b36a8759e3a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:89 
        self.run.track(
            Audio(audio),  # Pass audio file or numpy array
            name=title,  # The name of distributions
            step=step,  # Step index (optional)
            context=self.context,
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #b4b7ae9b7c2ac7b1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:101 
            self.run.track(value, name="{}-{}".format(scope_name, key), step=step, context=self.context)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #c8bc9fc1d741763b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:107 
            self.run.track(
                Image(value, title),  # Pass image data and/or caption
                name=title,  # The name of image set
                step=step,  # Step index (optional)
                context=self.context,
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #dec015b1376c290d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:118 
            self.run.track(
                Audio(value),  # Pass audio file or numpy array
                name=title,  # The name of distributions
                step=step,  # Step index (optional)
                context=self.context,
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 20 low-confidence finding(s)
low env_fs dependency Excluded from app score #82a14cec5bd3f092 — Filesystem access.
pkgs/python/[email protected]/setup.py:45 
with open(os.path.join(cwd, "trainer", "VERSION")) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf7e794ed13e4780 — Filesystem access.
pkgs/python/[email protected]/setup.py:64 
requirements = open(os.path.join(cwd, "requirements.txt"), "r").readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a19da9c9a62f3a09 — Filesystem access.
pkgs/python/[email protected]/setup.py:65 
with open(os.path.join(cwd, "requirements.dev.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74ef06c74116fcbf — Filesystem access.
pkgs/python/[email protected]/setup.py:67 
with open(os.path.join(cwd, "requirements.test.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01fe7b2a8e558e6e — Filesystem access.
pkgs/python/[email protected]/setup.py:71 
with open("README.md", "r", encoding="utf-8") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d432cc86d7847f5b — Filesystem access.
pkgs/python/[email protected]/trainer/__init__.py:6 
with open(os.path.join(os.path.dirname(__file__), "VERSION"), "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee06b98ad1779486 — Environment-variable access.
pkgs/python/[email protected]/trainer/analytics.py:5 
telemetry = os.environ.get("TRAINER_TELEMETRY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #86c80480b8a3f52a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/trainer/analytics.py:12 
    _ = requests.get(URL, timeout=5)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #79530b53582eef9f — Environment-variable access.
pkgs/python/[email protected]/trainer/distribute.py:47 
        my_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0719c61c080f24ff — Environment-variable access.
pkgs/python/[email protected]/trainer/distribute.py:64 
    if "CUDA_VISIBLE_DEVICES" in os.environ and os.environ["CUDA_VISIBLE_DEVICES"] != "":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d262aa6607d12bd8 — Environment-variable access.
pkgs/python/[email protected]/trainer/distribute.py:65 
        gpus = os.environ["CUDA_VISIBLE_DEVICES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac2cb21000a2b656 — Environment-variable access.
pkgs/python/[email protected]/trainer/logging/__init__.py:14 
    if "MLFLOW_TRACKING_URI" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43e3756fff87919c — Environment-variable access.
pkgs/python/[email protected]/trainer/logging/__init__.py:15 
        return os.environ["MLFLOW_TRACKING_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32ce44268de612ae — Environment-variable access.
pkgs/python/[email protected]/trainer/logging/__init__.py:20 
    if "AIM_TRACKING_URI" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c998ed114dff1606 — Environment-variable access.
pkgs/python/[email protected]/trainer/logging/__init__.py:21 
        return os.environ["AIM_TRACKING_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fb0c3b7695d9f3d — Filesystem access.
pkgs/python/[email protected]/trainer/trainer.py:668 
            with open(file_path, "r", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6242222aca4c9661 — Environment-variable access.
pkgs/python/[email protected]/trainer/trainer_utils.py:92 
    os.environ["CUDA_DEVICE_ORDER"] = "PCI_BUS_ID"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #772bd0d4a0e3c1ff — Environment-variable access.
pkgs/python/[email protected]/trainer/trainer_utils.py:93 
    if "CUDA_VISIBLE_DEVICES" not in os.environ and gpu is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3783e43b9e4554c1 — Environment-variable access.
pkgs/python/[email protected]/trainer/trainer_utils.py:105 
    os.environ["PYTHONHASHSEED"] = str(training_seed)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8cc5dd6f5c0e392 — Environment-variable access.
pkgs/python/[email protected]/trainer/utils/distributed.py:21 
        rank = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

aiohttp

python dependency
expand_more 19 low-confidence finding(s)
low env_fs dependency Excluded from app score #81a2a2e027a655e2 — Filesystem access.
pkgs/python/[email protected]/aiohttp/cookiejar.py:207 
        with open(
            file_path,
            mode="w",
            encoding="utf-8",
            opener=lambda path, flags: os.open(path, flags, 0o600),
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddaaf3fc86f00119 — Environment-variable access.
pkgs/python/[email protected]/aiohttp/helpers.py:73 
NO_EXTENSIONS = bool(os.environ.get("AIOHTTP_NO_EXTENSIONS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2928b641951b724 — Environment-variable access.
pkgs/python/[email protected]/aiohttp/helpers.py:82 
    not sys.flags.ignore_environment and bool(os.environ.get("PYTHONASYNCIODEBUG"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a89ddbbbe6cbd24 — Environment-variable access.
pkgs/python/[email protected]/aiohttp/helpers.py:228 
    netrc_env = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #020489904b519850 — Environment-variable access.
pkgs/python/[email protected]/aiohttp/web_fileresponse.py:50 
NOSENDFILE: Final[bool] = bool(os.environ.get("AIOHTTP_NOSENDFILE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #6497fa9358715313 — Environment-variable access.
pkgs/python/[email protected]/docs/conf.py:21 
    os.getenv("READTHEDOCS", "False") == "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #ef54a35741ce071b — Environment-variable access.
pkgs/python/[email protected]/docs/conf.py:22 
    and os.environ["READTHEDOCS_VERSION_TYPE"] == "tag"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #71506c7b69c618bf — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:31 
with open(_version_path, encoding="latin1") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #f3e001f78293cc2e — Filesystem access.
pkgs/python/[email protected]/examples/web_ws.py:20 
        with open(WS_FILE, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1196dc15c67952ca — Filesystem access.
pkgs/python/[email protected]/requirements/sync-direct-runtime-deps.py:12 
data = tomllib.loads(Path("pyproject.toml").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8db48f974462d37c — Filesystem access.
pkgs/python/[email protected]/requirements/sync-direct-runtime-deps.py:19 
with open(Path("requirements", "runtime-deps.in"), "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #076b4f01d4c03662 — Environment-variable access.
pkgs/python/[email protected]/setup.py:13 
    os.environ.get("AIOHTTP_USE_SYSTEM_DEPS", os.environ.get("USE_SYSTEM_DEPS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24e78b127a4e5939 — Environment-variable access.
pkgs/python/[email protected]/setup.py:15 
NO_EXTENSIONS: bool = bool(os.environ.get("AIOHTTP_NO_EXTENSIONS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54cd7ea7abadaedd — Environment-variable access.
pkgs/python/[email protected]/setup.py:16 
CYTHON_TRACING: bool = bool(os.environ.get("AIOHTTP_CYTHON_TRACE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #83801e46f0112ad5 — Filesystem access.
pkgs/python/[email protected]/tools/check_sum.py:30 
        hasher.update(full_src.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #22cbdbd9e1dc6810 — Filesystem access.
pkgs/python/[email protected]/tools/check_sum.py:37 
        dst_hash = dst.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #db7ea52befcffe6f — Filesystem access.
pkgs/python/[email protected]/tools/check_sum.py:41 
        dst.write_text(src_hash)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #e2586664dbaa898e — Filesystem access.
pkgs/python/[email protected]/tools/cleanup_changes.py:30 
    changes = (root / "CHANGES.rst").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #fd8c3a2217a0adb5 — Filesystem access.
pkgs/python/[email protected]/tools/gen.py:16 
    code = compile(hdrs_file.read_text(), str(hdrs_file), "exec")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

anyascii

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #4022175cfffd2d20 — Filesystem access.
pkgs/python/[email protected]/anyascii/__init__.py:10 
        return files(package).joinpath(resource).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

bnnumerizer

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #97d733e0f7e5c7d4 — Filesystem access.
pkgs/python/[email protected]/setup.py:23 
  long_description=open('README.md',encoding='utf-8').read() + '\n\n' + open('CHANGELOG.txt',encoding='utf-8').read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

bnunicodenormalizer

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #cef2da42a3155bc5 — Filesystem access.
pkgs/python/[email protected]/setup.py:23 
  long_description=open('README.md',encoding='utf-8').read() + '\n\n' + open('CHANGELOG.txt',encoding='utf-8').read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

coqpit

python dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #4ff8cf1cbbaf0810 — Filesystem access.
pkgs/python/[email protected]/coqpit/coqpit.py:713 
        with open(file_name, "w", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a80cbbcded927c6 — Filesystem access.
pkgs/python/[email protected]/coqpit/coqpit.py:726 
        with open(file_name, "r", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #253f85f4a3b5cf27 — Filesystem access.
pkgs/python/[email protected]/setup.py:10 
with open(os.path.join(cwd, "VERSION")) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2319ab1176ba0193 — Filesystem access.
pkgs/python/[email protected]/setup.py:23 
        with open(version_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c27251b0d402c69d — Filesystem access.
pkgs/python/[email protected]/setup.py:33 
requirements = open(os.path.join(cwd, "requirements.txt"), "r").readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71d6145debf67130 — Filesystem access.
pkgs/python/[email protected]/setup.py:34 
with open("README.md", "r", encoding="utf-8") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

cython

python dependency
expand_more 152 low-confidence finding(s)
low env_fs dependency Excluded from app score #25e47a73a44b5c53 — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/BuildExecutable.py:45 
CC = get_config_var('CC', os.environ.get('CC', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73cb42f724c9f46a — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/BuildExecutable.py:46 
CFLAGS = get_config_var('CFLAGS') + ' ' + os.environ.get('CFLAGS', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3631ffc0900bb21 — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/BuildExecutable.py:47 
LINKCC = get_config_var('LINKCC', os.environ.get('LINKCC', CC))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d76f54521c0f76e — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Cache.py:39 
    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1b1cc86e5b37ff5 — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Cache.py:60 
    if "CYTHON_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcb8dcc99b0d938a — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Cache.py:61 
        return os.environ["CYTHON_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd8fec5d617d0b4b — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Cache.py:69 
            parent = os.environ.get("XDG_CACHE_HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1680c3ac648de60a — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Cache.py:148 
                with open(c_file, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13150c8f8934773d — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Cache.py:163 
            with open(c_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #992b9d271d68b5ce — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Dependencies.py:974 
        force = os.environ.get("CYTHON_FORCE_REGEN") == "1"  # allow global overrides for build systems

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db9afdbff04ab32e — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Dependencies.py:1161 
                f = open(c_file, 'r', encoding='iso8859-1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0762234a115370a4 — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Dependencies.py:1214 
if os.environ.get('XML_RESULTS'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c1419c1d14a4254 — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Dependencies.py:1215 
    compile_result_dir = os.environ['XML_RESULTS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8922c8d1d7158dc1 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Dependencies.py:1234 
                output = open(os.path.join(compile_result_dir, name + ".xml"), "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f34231e9fdc466ce — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Inline.py:248 
            fh = open(pyx_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ab1404d385a5d29 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:154 
        with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fad8cfab4ed8f16 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:353 
                with open(html_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b90b1f1c574607b — Filesystem access.
pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:379 
        with open(pgo_wrapper_c_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9e29afd3658ca64 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:406 
        with open(pyx_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce7b96781b1e9c27 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:44 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d33e2a4eac22e11 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:51 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #746bd64fcacb0679 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:55 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ed033472a0ecbb5 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:60 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d64a3f354bc0cee2 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:67 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8762687b8ccd735 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:73 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c51c6d061e751c73 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:89 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f23f1d8d5f4fdb2 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:101 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6946e014d83961ac — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:117 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1101b87ced7c7854 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:138 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6dda097e2049b37e — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:165 
        with open(hash_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3275f32ad963964 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestDependencies.py:12 
    with open(pjoin(dir_path, filename), "w", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c28727cf90c7702f — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:40 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52034e089cce5ed2 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:43 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24819353bf8b7be6 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:56 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5833ce17f772ec18 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:59 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a775e7467eef3b86 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:64 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f70a04d41bcbdbe — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:82 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9dc32025f8cff10 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:85 
        with open(a_py, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81735118de4fb34e — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:98 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a98abddde1e18dd — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:101 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40378d9ae2606027 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:106 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9382c2724ca1153f — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:124 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f7d2b792fb44782 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:127 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #602e835c3ae1a17e — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:130 
        with open(b_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #329978d84c9cdc4b — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:144 
        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29ba75d2e0b9e17c — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:147 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e8e09168f6c89d7 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:152 
        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fceb6c0444824c4 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:175 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f84b54bef24289df — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:178 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97bf40fc8da9ce2d — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:181 
        with open(b_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ba61b06da930b3f — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:184 
        with open(b_py, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b8f3a7182f855d2 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:198 
        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e419530c966f1c3b — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:201 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #005fa60e5b4ec91c — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:206 
        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #caa1824768dfcc91 — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/Annotate.py:126 
        with open(html_filename, "w", encoding="UTF-8") as out_buffer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6da0a12c01c85317 — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/FlowControl.py:739 
            with open(dot_output, 'w') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61dd579209d8337b — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/Main.py:357 
            with open(dep_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cbf96515d97051a8 — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/Main.py:413 
        with open(source_desc.filename, encoding='iso8859-1', newline='') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10af135171f9ebfa — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/Main.py:546 
            with open(html_filename, encoding="UTF-8") as html_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51c4315ba7fc46d8 — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/Tests/TestParseTreeTransforms.py:269 
            f = open(self.debug_dest)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4ddf626392ff990 — Filesystem access.
pkgs/python/[email protected]/Cython/Coverage.py:313 
        with open(c_file, encoding='utf8') as lines:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75f89204921ecb65 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Cygdb.py:81 
                interpreter_file = open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14a3fbc18a32459f — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Cygdb.py:160 
    with open(tempfilename) as tempfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3fa8688f6a00ae9 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/DebugWriter.py:81 
        with open(interpreter_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a6f5b1eb616c557 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:23 
with open(codefile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef09473afc1e4f3c — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:115 
            new_stderr = open(os.devnull, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b160878ea3c3395 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:210 
        with open(self.gdb_command_file, 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edaf4c97013d2d1b — Environment-variable access.
pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:217 
        path = os.environ.get('PYTHONPATH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8630c9db96c662e — Environment-variable access.
pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:222 
        env = dict(os.environ, PYTHONPATH=os.pathsep.join(paths))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0434ac147650c46d — Environment-variable access.
pkgs/python/[email protected]/Cython/Debugger/Tests/test_libcython_in_gdb.py:523 
_do_debug = os.environ.get('GDB_DEBUG')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fced4ff331693830 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Tests/test_libcython_in_gdb.py:525 
    _debug_file = open('/dev/tty', 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9dff88d9e4d1442e — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/libcython.py:521 
        with open(self.filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b22b17ba32c2950b — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/libcython.py:777 
                f = open(arg)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bea5dfa795f92a3 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/libpython.py:954 
            with open(os_fsencode(filename)) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1da9ede757b93f6 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/libpython.py:1746 
            f = open(os_fsencode(filename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #392abc6deb263c13 — Filesystem access.
pkgs/python/[email protected]/Cython/Tempita/_tempita.py:155 
        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9224f95089ec2636 — Environment-variable access.
pkgs/python/[email protected]/Cython/Tempita/_tempita.py:1063 
        vars.update(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f046aa2b45f46f79 — Filesystem access.
pkgs/python/[email protected]/Cython/Tempita/_tempita.py:1077 
        with open(template_name, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fdba1dbf1280b42 — Filesystem access.
pkgs/python/[email protected]/Cython/Tempita/_tempita.py:1082 
        with open(options.output, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ccebd05b78b66ca — Filesystem access.
pkgs/python/[email protected]/Cython/TestUtils.py:262 
            with open(c_file, encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #062df8bc9a20bd94 — Filesystem access.
pkgs/python/[email protected]/Cython/TestUtils.py:325 
    with open(tree_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c99b84f64674496a — Filesystem access.
pkgs/python/[email protected]/Cython/TestUtils.py:336 
                    cur_file = open(path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #874a276e2a1fb0ad — Filesystem access.
pkgs/python/[email protected]/Cython/TestUtils.py:381 
    with open(file_path, mode=mode, encoding=encoding, newline=newline) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2b1d54d81859c81 — Filesystem access.
pkgs/python/[email protected]/Cython/Tests/TestTestUtils.py:28 
        with open(file_path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1b2e74ef6b5e255 — Filesystem access.
pkgs/python/[email protected]/Cython/Tests/xmlrunner.py:317 
                report_file = open('%s%sTEST-%s.xml' %
                    (test_runner.output, os.sep, suite), 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cfba87f493f972a — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:157 
    return open(path, "w", encoding="UTF-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9cc91a72c565491 — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:185 
            with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b05d332348c35b8 — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:208 
            with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #882f58a43b87d28f — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:397 
            f = open(source_filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5aa46de21022ac20 — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:402 
            stream = open(source_filename, encoding=encoding, errors=error_handling)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30b1fdf6c6f2239b — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:645 
    with open(target+'.dep', 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #c772287d56a0cef6 — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/bm_raytrace.py:208 
        with open(filename, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #24bf7ac68776f27e — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/report.py:16 
        with open(csv_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #c573342244e5cff4 — Environment-variable access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:40 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #c23ac7ab62ebf1d4 — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:88 
    with open(tmp_dir / 'setup.py', 'w') as setup_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #0b685961cf25e0d1 — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:153 
        with open(profile_input) as data_file_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #31f38a16f422ea8a — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:154 
            with open(data_file_name, mode='w') as data_file_out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #695a2681d3425af6 — Environment-variable access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:275 
    logging.info(f"CFLAGS={os.environ.get('CFLAGS', DISTUTILS_CFLAGS)}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #1013b896e62b153b — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:534 
        with open(options.report_csv, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #9c6a2ca8380cf2f4 — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:541 
        with open(options.report_sizes_csv, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #483ffc5820ba3ef8 — Filesystem access.
pkgs/python/[email protected]/Demos/embed/assert_equal.py:5 
f1 = open(sys.argv[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11d27a7ffec97e83 — Filesystem access.
pkgs/python/[email protected]/Demos/embed/assert_equal.py:6 
f2 = open(sys.argv[2])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa34e1f5d71330a3 — Filesystem access.
pkgs/python/[email protected]/Tools/cevaltrace.py:34 
    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #625fc5ec16683b50 — Filesystem access.
pkgs/python/[email protected]/Tools/cevaltrace.py:71 
        with open(code_obj.co_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d12de0285a21cc5 — Filesystem access.
pkgs/python/[email protected]/Tools/cevaltrace.py:97 
        with open(version_header) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d786b11e526b8978 — Filesystem access.
pkgs/python/[email protected]/Tools/cython-generate-lexicon.py:50 
    with open(Lexicon.__file__, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #974ff800f46fecc8 — Filesystem access.
pkgs/python/[email protected]/Tools/cython-generate-lexicon.py:67 
    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b88df69ae323106 — Filesystem access.
pkgs/python/[email protected]/Tools/cython-generate-shadow-pyi.py:34 
    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2600a13498c5272 — Filesystem access.
pkgs/python/[email protected]/Tools/cython-generate-shadow-pyi.py:43 
    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b09765230e45332 — Filesystem access.
pkgs/python/[email protected]/Tools/cython-generate-shadow-pyi.py:65 
    with open(file_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a5a952ba5792df1 — Filesystem access.
pkgs/python/[email protected]/Tools/download_release.py:68 
                with open(temp_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #e3e37343ad0d5461 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/Tools/dump_github_issues.py:30 
    with urlopen("https://api.github.com/rate_limit") as p:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #3bbe1deb55fe00c8 — Filesystem access.
pkgs/python/[email protected]/Tools/examine_sanitizer_logs.py:8 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0493b5b4bd96dacc — Filesystem access.
pkgs/python/[email protected]/Tools/gen_tests_for_posix_pxds.py:37 
    with open(TEST_PATH, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8558e5ac09c9522b — Filesystem access.
pkgs/python/[email protected]/Tools/jedityper.py:112 
        with open(target_path, 'w', encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82a627cd5caef53d — Filesystem access.
pkgs/python/[email protected]/Tools/make_dataclass_tests.py:422 
    with open(py_module_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c51d7d983372600c — Filesystem access.
pkgs/python/[email protected]/Tools/make_dataclass_tests.py:431 
    with open(output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd4475cc46c7932e — Filesystem access.
pkgs/python/[email protected]/pyximport/pyximport.py:146 
        with open(dependfile) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14a33abcc00d34bf — Environment-variable access.
pkgs/python/[email protected]/runtests.py:401 
        cc = os.environ.get('CXX') or sysconfig.get_config_var('CXX')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f52d72854eabf35e — Environment-variable access.
pkgs/python/[email protected]/runtests.py:403 
        cc = os.environ.get('CC') or sysconfig.get_config_var('CC')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a085d32a583176e — Environment-variable access.
pkgs/python/[email protected]/runtests.py:414 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #537c96ec1103cc1f — Environment-variable access.
pkgs/python/[email protected]/runtests.py:522 
INCLUDE_DIRS = [ d for d in os.getenv('INCLUDE', '').split(os.pathsep) if d ]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81c451c5afd56ec9 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:523 
CFLAGS = os.getenv('CFLAGS', '').split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f924eaf4ea973865 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:524 
CCACHE = os.getenv('CYTHON_RUNTESTS_CCACHE', '').split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93af06283cd0262b — Filesystem access.
pkgs/python/[email protected]/runtests.py:549 
    with io_open(filepath, encoding='ISO-8859-1', errors='ignore') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a79310ebbae56248 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1070 
            with open(self.module_path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6887930d56fafe3 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1191 
                with open(src) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e8df03a1a295cb6 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1192 
                    with open(dest, 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eccc4d2e6462c5bb — Filesystem access.
pkgs/python/[email protected]/runtests.py:1211 
        with io_open(source_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08c6a10301988934 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1216 
        with io_open(source_file, 'r', encoding='ISO-8859-1') as source_and_output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f965b363602dac9 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1218 
            out = io_open(os.path.join(workdir, os.path.basename(source_file)),
                          'w', encoding='ISO-8859-1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #704db354631aa619 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1442 
                    with open(os.path.join(workdir, file)) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #874828ef7fa1f1bd — Filesystem access.
pkgs/python/[email protected]/runtests.py:1444 
                    with open(os.path.join(workdir2, file)) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ade98aa63f6fb5dc — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2045 
        old_path = os.environ.get('PYTHONPATH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a19141faa8d398c — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2051 
        env = dict(os.environ, PYTHONPATH=new_path, PYTHONIOENCODING='utf8',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e792a7d21b6df1e — Filesystem access.
pkgs/python/[email protected]/runtests.py:2218 
        with open(list_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66b678ea45050af2 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2351 
    os.environ['CYTHON_PROJECT_DIR'] = os.path.abspath(os.path.dirname(__file__))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f5e0052df500d0d — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2604 
        if "PYTHONIOENCODING" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f1b7b6ff19a8954 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2606 
            os.environ["PYTHONIOENCODING"] = sys.stdout.encoding or sys.getdefaultencoding()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0a4e0dc650c4aa8 — Filesystem access.
pkgs/python/[email protected]/runtests.py:2766 
        with open("coverage-report.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ad1ec01dbaa0f89 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2989 
    if 'CI' in os.environ and sys.platform == 'darwin' and 'cpp' in languages:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da05a4ccdb8996be — Environment-variable access.
pkgs/python/[email protected]/runtests.py:3081 
    old_faulhandler_envvar = os.environ.get('PYTHONFAULTHANDLER')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b097c7e4c9bc329 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:3087 
        os.environ['PYTHONFAULTHANDLER'] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a3f63fe180e86c7 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:3112 
        if os.environ.get('PYTHONFAULTHANDLER') != old_faulhandler_envvar:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17c68afbeb4f0141 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:3114 
                del os.environ['PYTHONFAULTHANDLER']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0888484d92924798 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:3116 
                os.environ['PYTHONFAULTHANDLER'] = old_faulhandler_envvar

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca43390028f85110 — Environment-variable access.
pkgs/python/[email protected]/setup.py:27 
    os.environ['COPY_EXTENDED_ATTRIBUTES_DISABLE'] = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db05a8a21318665d — Environment-variable access.
pkgs/python/[email protected]/setup.py:28 
    os.environ['COPYFILE_DISABLE'] = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67ba943a34693635 — Environment-variable access.
pkgs/python/[email protected]/setup.py:129 
        'pgen', path=os.pathsep.join([os.environ['PATH'], os.path.join(get_path('include'), '..', 'Parser')]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bff69c739cf03a15 — Filesystem access.
pkgs/python/[email protected]/setup.py:246 
    with open("CHANGES.rst", encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7175e1f146157c34 — Environment-variable access.
pkgs/python/[email protected]/setup.py:320 
    if os.environ.get(env_var) == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdcebe7ee069655f — Environment-variable access.
pkgs/python/[email protected]/setup.py:349 
    env_var = os.environ.get(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

encodec

python dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #d9272e81ba98e22a — Filesystem access.
pkgs/python/[email protected]/encodec/__main__.py:92 
        out, out_sample_rate = decompress(args.input.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37ee19c30c61ac2c — Filesystem access.
pkgs/python/[email protected]/encodec/utils.py:67 
    with open(path, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bde448ceab4b1b5f — Filesystem access.
pkgs/python/[email protected]/setup.py:21 
for line in open('encodec/__init__.py'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dd3405384962539 — Filesystem access.
pkgs/python/[email protected]/setup.py:31 
    with open(HERE / "README.md", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

flask

python dependency
expand_more 21 low-confidence finding(s)
low env_fs dependency Excluded from app score #cd32886937d6fa37 — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:359 
            return open(path, mode)  # pyright: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af4a3726c2c396a2 — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:361 
        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc2a5c5ee4c33a2c — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:381 
            return open(path, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d7042b34d2776ec — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:383 
        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8d03471a7c345c0 — Environment-variable access.
pkgs/python/[email protected]/src/flask/app.py:611 
        if os.environ.get("FLASK_RUN_FROM_CLI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a935ec6c1793975f — Environment-variable access.
pkgs/python/[email protected]/src/flask/app.py:627 
            if "FLASK_DEBUG" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #557a75926ae4e5ce — Filesystem access.
pkgs/python/[email protected]/src/flask/blueprints.py:126 
            return open(path, mode)  # pyright: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #335f2737201139f5 — Filesystem access.
pkgs/python/[email protected]/src/flask/blueprints.py:128 
        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43735c3c4ae383ae — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:481 
    os.environ["FLASK_DEBUG"] = "1" if value else "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e308afcfd956bdb — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:675 
        os.environ["FLASK_RUN_FROM_CLI"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f6a38cd9ce30f63 — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:766 
        if key in os.environ or value is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af61e2d99aac7217 — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:769 
        os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20df644beb432905 — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:1028 
    startup = os.environ.get("PYTHONSTARTUP")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #077b528e089fcfbd — Filesystem access.
pkgs/python/[email protected]/src/flask/cli.py:1030 
        with open(startup) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7874f150a56c843 — Environment-variable access.
pkgs/python/[email protected]/src/flask/config.py:114 
        rv = os.environ.get(variable_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8c9df74390e55af — Environment-variable access.
pkgs/python/[email protected]/src/flask/config.py:154 
        for key in sorted(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5855793cb6619e9b — Environment-variable access.
pkgs/python/[email protected]/src/flask/config.py:158 
            value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02e950ad4801c954 — Filesystem access.
pkgs/python/[email protected]/src/flask/config.py:208 
            with open(filename, mode="rb") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a307f1830692d74c — Filesystem access.
pkgs/python/[email protected]/src/flask/config.py:293 
            with open(filename, "r" if text else "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e93831c1d8526860 — Environment-variable access.
pkgs/python/[email protected]/src/flask/helpers.py:32 
    val = os.environ.get("FLASK_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9225f4b3e890c2c1 — Environment-variable access.
pkgs/python/[email protected]/src/flask/helpers.py:43 
    val = os.environ.get("FLASK_SKIP_DOTENV")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fsspec

python dependency
expand_more 33 low-confidence finding(s)
low env_fs dependency Excluded from app score #925b33462cd682ab — Filesystem access.
pkgs/python/[email protected]/fsspec/caching.py:156 
                fd = open(self.location, "wb+")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e3076a720986dfe — Filesystem access.
pkgs/python/[email protected]/fsspec/caching.py:161 
            fd = open(self.location, "r+b")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82f92587a24726f2 — Environment-variable access.
pkgs/python/[email protected]/fsspec/config.py:11 
conf_dir = os.environ.get("FSSPEC_CONFIG_DIR", default_conf_dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46f3714abe4eb308 — Environment-variable access.
pkgs/python/[email protected]/fsspec/config.py:14 
def set_conf_env(conf_dict, envdict=os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15f99dd00aa774e4 — Filesystem access.
pkgs/python/[email protected]/fsspec/config.py:93 
            with open(os.path.join(cdir, fn)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f486085ad3ac3aba — Filesystem access.
pkgs/python/[email protected]/fsspec/conftest.py:111 
    with open(os.path.join(d, "out"), "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95e41da58397e7aa — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cache_metadata.py:51 
        with open(fn, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6184284beec194da — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:325 
                return open(fn, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #940c1862cd927a7b — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:611 
            open(firstpart(fn0) if fn0 else fn1, mode=open_files.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfa36648baf0428d — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:678 
            with open(fn, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fc14d27c8f8420d — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:690 
            with self.fs._open(path, mode="rb", **kwargs) as f, open(fn, "wb") as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30d46ec712f216a9 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:736 
            f = open(fn, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c416fd01f4caebbe — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:760 
        with open(fn, "rb") as f:  # noqa ASYNC230

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a265b4275e282269 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:916 
            with self.fs._open(path, mode="rb", **kwargs) as f, open(fn, "wb") as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #861e1449bcd21c48 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:950 
            return open(fn, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57589f8f570f9f11 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:973 
        self.fh = open(fn, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #225fa4961b159cbe — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/dirfs.py:146 
        return self.fs.write_text(
            self._join(path),
            value,
            encoding=encoding,
            errors=errors,
            newline=newline,
            **kwargs,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbd9c24f5d8399e6 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/ftp.py:205 
            outfile = open(lpath, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5aa90583146b83fc — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/http.py:271 
                outfile = open(lpath, "wb")  # noqa: ASYNC230

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #261684d6af65124a — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/http.py:303 
                context = open(lpath, "rb")  # noqa: ASYNC230

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #750e6f0bbedac023 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/http.py:837 
        with open(file, "r+b") as f:  # noqa: ASYNC230

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9970d4c09fe2a909 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/http_sync.py:390 
            lpath = open(lpath, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f2d7d8ced0f7014 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/http_sync.py:411 
                context = open(lpath, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04ac32504ddd1d9c — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/local.py:154 
            with open(path1, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5d50329d506aa9a — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/local.py:224 
            open(path, "a").close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94d8ded33ad011b7 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/local.py:395 
                self.f = open(self.path, mode=self.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acdbb0ac0a036a54 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/local.py:404 
                self.f = open(name, mode=self.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5e60f4f0ec954ba — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/reference.py:863 
        with open(lpath, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #763c1e904e63faad — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/reference.py:874 
            with open(lpath, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a4da473cef73a2c — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/reference.py:1268 
        with open(lpath, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #549a1a83380579f4 — Filesystem access.
pkgs/python/[email protected]/fsspec/spec.py:940 
                outfile = open(lpath, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8423d5efc95f0625 — Filesystem access.
pkgs/python/[email protected]/fsspec/spec.py:1029 
        with open(lpath, "rb") as f1:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d38960f18dbc0c9 — Filesystem access.
pkgs/python/[email protected]/fsspec/utils.py:629 
        with open(fd, mode) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

g2pkk

python dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #a4ac1283703b76ef — Filesystem access.
pkgs/python/[email protected]/g2pkk/g2pkk.py:85 
        with open(self.idioms_path, 'r', encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47c8eae9a1f51d8c — Filesystem access.
pkgs/python/[email protected]/g2pkk/utils.py:138 
    with open(os.path.dirname(os.path.abspath(__file__)) + '/table.csv', 'r', encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cc7561059d3ed32 — Filesystem access.
pkgs/python/[email protected]/g2pkk/utils.py:234 
    text = open('rules.txt', 'r', encoding='utf8').read().splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0933495a41d9da1 — Filesystem access.
pkgs/python/[email protected]/g2pkk/utils.py:250 
    with open(os.path.dirname(os.path.abspath(__file__)) + '/rules.txt', 'r', encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25a59980e7110f1d — Filesystem access.
pkgs/python/[email protected]/setup.py:3 
with open("README.md", mode="r", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gruut

python dependency
expand_more 11 low-confidence finding(s)
low env_fs dependency Excluded from app score #70f88bef041b6a10 — Filesystem access.
pkgs/python/[email protected]/gruut/__init__.py:20 
__version__ = (_DIR / "VERSION").read_text(encoding="utf-8").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6bbc9c8a4a4aa57 — Filesystem access.
pkgs/python/[email protected]/gruut/corpus2db.py:28 
    with open(args.corpus, "r", encoding="utf-8") as corpus_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09f3929ffddbb11b — Filesystem access.
pkgs/python/[email protected]/gruut/g2p.py:185 
    with open(corpus_path, "r", encoding="utf-8") as corpus:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef292b225d32e329 — Filesystem access.
pkgs/python/[email protected]/gruut/lexicon2db.py:67 
        lexicon_file = open(args.lexicon, "r", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #834ce78eb9df18f7 — Filesystem access.
pkgs/python/[email protected]/gruut/pos.py:193 
    with open(conllu_path, "r", encoding="utf-8") as conllu_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2dc8bf7306d434e — Filesystem access.
pkgs/python/[email protected]/gruut/pos.py:267 
    with open(args.conllu, "r", encoding="utf-8") as conllu_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ce76db702db895c — Filesystem access.
pkgs/python/[email protected]/gruut/pos.py:321 
    with open(args.conllu, "r", encoding="utf-8") as conllu_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b29de3b94e7c3934 — Environment-variable access.
pkgs/python/[email protected]/gruut/utils.py:91 
    maybe_config_home = os.environ.get("XDG_CONFIG_HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e184119e9c079aaa — Filesystem access.
pkgs/python/[email protected]/setup.py:16 
    long_description = readme_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d2a6c80f70bbf96 — Filesystem access.
pkgs/python/[email protected]/setup.py:21 
    with open(requirements_path, "r", encoding="utf-8") as requirements_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26bff8d91a25c38e — Filesystem access.
pkgs/python/[email protected]/setup.py:25 
with open(version_path, "r", encoding="utf-8") as version_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

hangul_romanize

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #6ef451fa8697e37f — Filesystem access.
pkgs/python/[email protected]/setup.py:7 
    with open('hangul_romanize/version.txt', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4639fa7af66d8d9 — Filesystem access.
pkgs/python/[email protected]/setup.py:13 
        with open('README.rst', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jamo

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #851d63f7c9a1e2fe — Filesystem access.
pkgs/python/[email protected]/jamo/jamo.py:24 
with open(os.path.join(_ROOT, 'data', "U+11xx.json"), 'r') as namedata:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bdf5a1c2ca8b1da3 — Filesystem access.
pkgs/python/[email protected]/jamo/jamo.py:27 
with open(os.path.join(_ROOT, 'data', "U+31xx.json"), 'r') as namedata:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f56f6c0331eb51a8 — Filesystem access.
pkgs/python/[email protected]/setup.py:11 
with open('README.rst', encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jieba

python dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #726294ccf60c61c2 — Filesystem access.
pkgs/python/[email protected]/jieba/__init__.py:135 
                    with open(cache_file, 'rb') as cf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b2e865fd853dd91 — Filesystem access.
pkgs/python/[email protected]/jieba/__init__.py:378 
            return open(self.dictionary, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #335c99dbe1096535 — Filesystem access.
pkgs/python/[email protected]/jieba/__init__.py:398 
            f = open(f, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d726a152832eb522 — Filesystem access.
pkgs/python/[email protected]/jieba/__main__.py:43 
fp = open(args.filename, 'r') if args.filename else sys.stdin

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #641f0fd7dc2376b3 — Filesystem access.
pkgs/python/[email protected]/jieba/_compat.py:23 
    get_module_res = lambda *res: open(os.path.normpath(os.path.join(
        os.getcwd(), os.path.dirname(__file__), *res)), 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47ed78104cca36ce — Filesystem access.
pkgs/python/[email protected]/jieba/analyse/tfidf.py:27 
        content = open(abs_path, 'rb').read().decode('utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12f10a95061dbc20 — Filesystem access.
pkgs/python/[email protected]/jieba/analyse/tfidf.py:47 
            content = open(new_idf_path, 'rb').read().decode('utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e7a17c69c08cff9 — Filesystem access.
pkgs/python/[email protected]/jieba/lac_small/reader_small.py:33 
    for line in io.open(dict_path, "r", encoding='utf8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

librosa

python dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #d4fdfe0fb0b6d9c3 — Environment-variable access.
pkgs/python/[email protected]/librosa/_cache.py:85 
    os.environ.get("LIBROSA_CACHE_DIR", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7376f0f319076bd2 — Environment-variable access.
pkgs/python/[email protected]/librosa/_cache.py:86 
    mmap_mode=os.environ.get("LIBROSA_CACHE_MMAP", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7458111ae2c7aac — Environment-variable access.
pkgs/python/[email protected]/librosa/_cache.py:87 
    compress=os.environ.get("LIBROSA_CACHE_COMPRESS", False),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40a9224395cd13c0 — Environment-variable access.
pkgs/python/[email protected]/librosa/_cache.py:88 
    verbose=int(os.environ.get("LIBROSA_CACHE_VERBOSE", 0)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60cc61dc9ea8f546 — Environment-variable access.
pkgs/python/[email protected]/librosa/_cache.py:89 
    level=int(os.environ.get("LIBROSA_CACHE_LEVEL", 10)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e42b204cdbf5301 — Environment-variable access.
pkgs/python/[email protected]/librosa/util/files.py:32 
__data_path = os.environ.get("LIBROSA_DATA_DIR", pooch.os_cache("librosa"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #416d70d38553359a — Filesystem access.
pkgs/python/[email protected]/librosa/util/files.py:176 
    with open(license_file, "r") as fdesc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bad011a144ff5afd — Filesystem access.
pkgs/python/[email protected]/librosa/util/files.py:326 
    with open(version_data, "rb") as fdesc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mutagen

python dependency
expand_more 10 low-confidence finding(s)
low env_fs dependency Excluded from app score #bf1294589afb385e — Filesystem access.
pkgs/python/[email protected]/mutagen/_tools/mid3iconv.py:122 
        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11f87ac5f0e19a85 — Filesystem access.
pkgs/python/[email protected]/mutagen/_tools/mid3v2.py:258 
                            with open(fn, "rb") as h:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0d92758f6fde0f8 — Filesystem access.
pkgs/python/[email protected]/mutagen/_tools/moggsplit.py:48 
            with open(filename, "rb") as fileobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35dd9f288567936c — Filesystem access.
pkgs/python/[email protected]/mutagen/_tools/moggsplit.py:50 
                    m3u = open(format["base"] + ".m3u", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad4cf76a947731df — Filesystem access.
pkgs/python/[email protected]/mutagen/_tools/moggsplit.py:63 
                            new_fileobj = open(new_filename, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #878bd24bbaeb075e — Filesystem access.
pkgs/python/[email protected]/mutagen/_util.py:251 
            fileobj = open(filename, "rb+" if writable else "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7a375a0fbd6d602 — Filesystem access.
pkgs/python/[email protected]/mutagen/_util.py:260 
                    with open(filename, "rb") as fileobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #873029a59f0f6bc6 — Filesystem access.
pkgs/python/[email protected]/mutagen/_util.py:268 
                    fileobj = open(filename, "wb+")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #713e60631675f694 — Filesystem access.
pkgs/python/[email protected]/mutagen/_util.py:281 
                    with open(filename, "wb") as fileobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67a9a44e11a79d0a — Filesystem access.
pkgs/python/[email protected]/setup.py:246 
    with open('README.rst', encoding='utf-8') as h:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

nltk

python dependency
expand_more 89 low-confidence finding(s)
low env_fs dependency Excluded from app score #7da293aac8b1a8c9 — Filesystem access.
pkgs/python/[email protected]/nltk/__init__.py:33 
    with open(version_file) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab5357f8fef6132f — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:798 
            with open(filename, "wb") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9bab702b4ea8049 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:815 
        with open(filename, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #949f8bf48eacc3d7 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2272 
            with open(filename, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c3113bf4c949124 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2295 
            with open(filename, "wb") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd65b648fc102be8 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2310 
                with open(filename, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7df76415f22556cc — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2313 
                with open(filename) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aabfa75565f04bf8 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2327 
                with open(filename, "wb") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99e1a82f4f8f7ef4 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2330 
                with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e671a14684a4ee79 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chunkparser_app.py:1394 
        with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36067f05d2d3d758 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chunkparser_app.py:1415 
        with open(filename) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4c17b89c3018a80 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chunkparser_app.py:1430 
        with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #292f5b985a9f65d0 — Filesystem access.
pkgs/python/[email protected]/nltk/app/wordnet_app.py:138 
                    with open(usp) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bdf33a034f276747 — Filesystem access.
pkgs/python/[email protected]/nltk/app/wordnet_app.py:252 
            logfile = open(logfilename, "a", 1)  # 1 means 'line buffering'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22c959c91c81d7ba — Filesystem access.
pkgs/python/[email protected]/nltk/chunk/named_entity.py:235 
    with open(annfile) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb909821365d403e — Filesystem access.
pkgs/python/[email protected]/nltk/chunk/named_entity.py:247 
    with open(textfile) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5324501fe30625e — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1440 
        with open(trainfile_name, "w") as trainfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d93489000756abf0 — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1542 
        with open(weightfile_name) as weightfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f20c0e39ce202b99 — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1596 
    with open(f"{tab_dir}/weights.txt", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bf8858ec86e3617 — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1598 
    with open(f"{tab_dir}/mapping.tab", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f72d34f4d61d1a6f — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1600 
    with open(f"{tab_dir}/labels.txt", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #478f910e19fe5c20 — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1602 
    with open(f"{tab_dir}/alwayson.tab", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #033bb5cb9bf4b84e — Environment-variable access.
pkgs/python/[email protected]/nltk/classify/senna.py:70 
            senna_env = environ.get("SENNA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5261b2b3dabd5869 — Environment-variable access.
pkgs/python/[email protected]/nltk/classify/weka.py:51 
        if "WEKAHOME" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ad52168f1061923 — Environment-variable access.
pkgs/python/[email protected]/nltk/classify/weka.py:52 
            searchpath.insert(0, os.environ["WEKAHOME"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2226f8aa073d5aed — Filesystem access.
pkgs/python/[email protected]/nltk/classify/weka.py:283 
            outfile = open(outfile, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae543971e417a14d — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/crubadan.py:78 
        with open(mapper_file, encoding="utf-8") as raw:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eaa314d714a2ccb0 — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/crubadan.py:97 
        with open(ngram_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0d558c7192336ca — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/ipipan.py:191 
        with open(f) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c627ec8c61ca4284 — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/lin.py:43 
            with open(path) as lin_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16cf7a579e7145f0 — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/nkjp.py:283 
            fr = open(self.read_file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a3405b1f124988e — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/pl196x.py:110 
            with open(self._textids) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b48868dc9277b5e3 — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/xmldocs.py:168 
            with open(fileid, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08162e8396603867 — Environment-variable access.
pkgs/python/[email protected]/nltk/data.py:133 
        os.path.join(os.environ.get("APPDATA", "C:\\"), "nltk_data"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8e541c2e69a36fb — Environment-variable access.
pkgs/python/[email protected]/nltk/data.py:152 
_paths_from_env = os.environ.get("NLTK_DATA", "").split(os.pathsep)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a65b2bedebda47ad — Environment-variable access.
pkgs/python/[email protected]/nltk/data.py:154 
if "APPENGINE_RUNTIME" not in os.environ and os.path.expanduser("~/") != "~/":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe462406bcb0512a — Environment-variable access.
pkgs/python/[email protected]/nltk/downloader.py:1339 
        if "APPENGINE_RUNTIME" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b6198348d87435b — Environment-variable access.
pkgs/python/[email protected]/nltk/downloader.py:1349 
        if os.name == "nt" and "APPDATA" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f334b7d0bf44de87 — Environment-variable access.
pkgs/python/[email protected]/nltk/downloader.py:1350 
            homedir = os.environ["APPDATA"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d147512df1b2215 — Environment-variable access.
pkgs/python/[email protected]/nltk/downloader.py:1385 
            os.environ.get("NLTK_DOWNLOADER_FORCE_INTERACTIVE_SHELL", "false").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d96b11f3b799cde — Filesystem access.
pkgs/python/[email protected]/nltk/downloader.py:2527 
        with open(file, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3db9ed5d217f1889 — Filesystem access.
pkgs/python/[email protected]/nltk/downloader.py:2548 
        with open(file, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b44bcdaa35b91c5 — Environment-variable access.
pkgs/python/[email protected]/nltk/downloader.py:3006 
        default=os.environ.get("NLTK_DOWNLOAD_URL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #021c51af12618cbc — Filesystem access.
pkgs/python/[email protected]/nltk/draw/util.py:1870 
        with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81a052c87f0a6e24 — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:625 
        if env_var in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af355129ac9511e6 — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:628 
                yield os.environ[env_var]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff6e0d6483b803d2 — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:630 
            for env_dir in os.environ[env_var].split(os.pathsep):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9765cdcd2eb37dd — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:835 
        if env_var in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b56a2dabb81c9cf7 — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:837 
                classpath = os.environ["CLASSPATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e3f01d3dbd5e3d9 — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:875 
                jar_env = os.path.expanduser(os.environ[env_var])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cdcc75485fe86ee — Filesystem access.
pkgs/python/[email protected]/nltk/metrics/agreement.py:460 
    with open(options.file) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c7291b466faadc2 — Filesystem access.
pkgs/python/[email protected]/nltk/parse/malt.py:218 
                with open(output_file_name) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da730b458574eb8f — Filesystem access.
pkgs/python/[email protected]/nltk/parse/transitionparser.py:551 
            pickle.dump(model, open(modelfile, "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d04e5f32a609451 — Filesystem access.
pkgs/python/[email protected]/nltk/parse/transitionparser.py:570 
        with open(modelFile, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ef31d2548c43178 — Environment-variable access.
pkgs/python/[email protected]/nltk/pathsec.py:41 
    env_paths = os.environ.get("NLTK_DATA", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78a061c26c82b88f — Filesystem access.
pkgs/python/[email protected]/nltk/sem/chat80.py:677 
        with open("chat_pnames.cfg", "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09ad9ed3381c9d2d — Filesystem access.
pkgs/python/[email protected]/nltk/sentiment/sentiment_analyzer.py:190 
        with open(filename, "wb") as storage_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0a1c29fb34c9bbe — Filesystem access.
pkgs/python/[email protected]/nltk/tag/perceptron.py:108 
        with open(path, "w") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8b45eca7f0ba14c — Filesystem access.
pkgs/python/[email protected]/nltk/tag/perceptron.py:113 
        with open(path) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee3cd32a5d5306bd — Filesystem access.
pkgs/python/[email protected]/nltk/tag/perceptron.py:272 
            with open(path_join(loc, json_file), "w") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c086fce083e3e083 — Filesystem access.
pkgs/python/[email protected]/nltk/tbl/demo.py:249 
            with open(cache_baseline_tagger, "wb") as print_rules:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bb316806e0e6bc1 — Filesystem access.
pkgs/python/[email protected]/nltk/tbl/demo.py:256 
        with open(cache_baseline_tagger, "rb") as print_rules:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43fee66fadce7de1 — Filesystem access.
pkgs/python/[email protected]/nltk/tbl/demo.py:317 
        with open(error_output, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #adb056510e75652c — Filesystem access.
pkgs/python/[email protected]/nltk/tbl/demo.py:325 
        with open(serialize_output, "wb") as print_rules:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c80dff63a78747a5 — Filesystem access.
pkgs/python/[email protected]/nltk/tbl/demo.py:328 
        with open(serialize_output, "rb") as print_rules:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7efad191482e0184 — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/punkt.py:1611 
        with open("/tmp/punkt.new", "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c738db8294710532 — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/punkt.py:1806 
    with open(f"{dir}/collocations.tab", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #945a763c66ccf43b — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/punkt.py:1808 
    with open(f"{dir}/sent_starters.txt", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b750e1739978f356 — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/punkt.py:1810 
    with open(f"{dir}/abbrev_types.txt", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e170fd64bc1b95fa — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/punkt.py:1812 
    with open(f"{dir}/ortho_context.tab", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e73b768014fe35a — Environment-variable access.
pkgs/python/[email protected]/nltk/tokenize/stanford_segmenter.py:131 
        if os.environ.get("STANFORD_SEGMENTER"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ee299d1d3fcfdfc — Environment-variable access.
pkgs/python/[email protected]/nltk/tokenize/stanford_segmenter.py:132 
            search_path = {os.path.join(os.environ.get("STANFORD_SEGMENTER"), "data")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a1deb434956d531 — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/stanford_segmenter.py:291 
        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f989ad4956cd642 — Environment-variable access.
pkgs/python/[email protected]/nltk/tokenize/stanford_segmenter.py:301 
            for value in os.environ.get("NLTK_SEGMENTER_ALLOW_SHA256", "").split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c02077f47c92be9e — Filesystem access.
pkgs/python/[email protected]/nltk/twitter/common.py:142 
        outf = open(outfile, "w", newline="", encoding=encoding, errors=errors)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6d48159b922aeff — Filesystem access.
pkgs/python/[email protected]/nltk/twitter/twitterclient.py:524 
                self.output = open(self.fname, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0862b27767cae23 — Environment-variable access.
pkgs/python/[email protected]/nltk/twitter/util.py:39 
            self.twitter_dir = os.environ["TWITTER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1ac098a0f8b98d7 — Filesystem access.
pkgs/python/[email protected]/nltk/twitter/util.py:86 
        with open(self.creds_fullpath) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28f8accb290fd0df — Filesystem access.
pkgs/python/[email protected]/nltk/twitter/util.py:133 
    with open(creds_file, "a") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b360171455b94d7c — Filesystem access.
pkgs/python/[email protected]/setup.py:25 
with open(version_file) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #68a146107cc3c796 — Filesystem access.
pkgs/python/[email protected]/tools/find_deprecated.py:127 
                s = open(os.path.join(root, filename)).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #1e7876d3dce48e5b — Filesystem access.
pkgs/python/[email protected]/tools/find_deprecated.py:160 
            print_deprecated_uses_in(open(path).readline, path, dep_files, dep_names, 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #ababe3e591c6129e — Filesystem access.
pkgs/python/[email protected]/tools/find_deprecated.py:162 
            for example in DocTestParser().get_examples(open(path).read()):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #e84dd396f016a9b8 — Filesystem access.
pkgs/python/[email protected]/tools/global_replace.py:27 
        s = open(file, "rb").read().decode("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #f3a882f68028da81 — Filesystem access.
pkgs/python/[email protected]/tools/global_replace.py:29 
        out = open(file, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #56db62245888bc7b — Filesystem access.
pkgs/python/[email protected]/tools/huggingface/push_stopwords.py:185 
    open(readme_path, "w").write(readme)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00bbd0b3402d453c — Filesystem access.
pkgs/python/[email protected]/web/conf.py:65 
    with open(
        os.path.join(web_folder, "_templates", "doctest.rst"), encoding="utf8"
    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2f0808c1a001483 — Filesystem access.
pkgs/python/[email protected]/web/conf.py:88 
    with open(os.path.join(web_folder, "team", "team.json"), encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d80764c406c02309 — Filesystem access.
pkgs/python/[email protected]/web/conf.py:93 
    with open(
        os.path.join(web_folder, "_templates", "team.html"), encoding="utf8"
    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

num2words

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #b9b2fff0c70a2ccf — Filesystem access.
pkgs/python/[email protected]/setup.py:42 
LONG_DESC = open('README.rst', 'rt', encoding="utf-8").read() + '\n\n' + \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88aeda82c70e6228 — Filesystem access.
pkgs/python/[email protected]/setup.py:43 
            open('CHANGES.rst', 'rt', encoding="utf-8").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59527a850716d66b — Filesystem access.
pkgs/python/[email protected]/setup.py:51 
    with open(fname, 'r', encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

numba

python dependency
expand_more 69 low-confidence finding(s)
low env_fs tooling reachable #9f6371891e7344f9 — Filesystem access.
pkgs/python/[email protected]/docs/dagmap/render.py:16 
    with open(filename, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #87ecc9da96b8472c — Filesystem access.
pkgs/python/[email protected]/docs/dagmap/render.py:77 
    with open(args.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #98aed44be914f4f2 — Environment-variable access.
pkgs/python/[email protected]/docs/gh-pages.py:42 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #9fe7c3cc4a2ecfc6 — Environment-variable access.
pkgs/python/[email protected]/docs/source/conf.py:31 
on_rtd = os.environ.get('READTHEDOCS') == 'True'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1ff41ae5f487259 — Filesystem access.
pkgs/python/[email protected]/numba/core/annotations/type_annotations.py:181 
        with open(template_filename, 'r') as template:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ebf91bb88a8eb17 — Filesystem access.
pkgs/python/[email protected]/numba/core/caching.py:514 
            with open(self._index_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17ef3c89e3e36ec7 — Filesystem access.
pkgs/python/[email protected]/numba/core/caching.py:543 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #272fb5ae8bb71d9e — Filesystem access.
pkgs/python/[email protected]/numba/core/caching.py:573 
            with open(tmpname, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86833c61a39bff34 — Filesystem access.
pkgs/python/[email protected]/numba/core/config.py:57 
        f = open('/proc/cpuinfo', 'r')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6210e76a12397d8 — Filesystem access.
pkgs/python/[email protected]/numba/core/config.py:102 
                with open(_config_fname, 'rt') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df1d99695b631892 — Environment-variable access.
pkgs/python/[email protected]/numba/core/config.py:109 
        for name, value in os.environ.items():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3e0c39d9da3a482 — Environment-variable access.
pkgs/python/[email protected]/numba/core/config.py:452 
        RUNNING_UNDER_PROFILER = 'VS_PROFILER' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3babbc8b28f09386 — Environment-variable access.
pkgs/python/[email protected]/numba/core/errors.py:182 
    if os.environ.get('NUMBA_DISABLE_ERROR_MESSAGE_HIGHLIGHTING', None):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60a9e46720ae03f8 — Filesystem access.
pkgs/python/[email protected]/numba/core/typed_passes.py:206 
            with open(config.HTML, 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #876134d2bd4bf8e2 — Filesystem access.
pkgs/python/[email protected]/numba/cuda/codegen.py:27 
        with open(fname, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13bd56e27b25ae93 — Environment-variable access.
pkgs/python/[email protected]/numba/cuda/cuda_paths.py:126 
    cuda_home = os.environ.get('CUDA_HOME')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d688485f750536e0 — Environment-variable access.
pkgs/python/[email protected]/numba/cuda/cuda_paths.py:129 
        cuda_home = os.environ.get('CUDA_PATH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ef059b75b33fbaf — Filesystem access.
pkgs/python/[email protected]/numba/cuda/cudadrv/libs.py:37 
    with open(get_libdevice(arch), 'rb') as bcfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a6a01c0c6b55ce0 — Environment-variable access.
pkgs/python/[email protected]/numba/cuda/testing.py:90 
    return unittest.skipIf(os.environ.get('CUDA_MEMCHECK') is not None, reason)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0e4a3b12e9a7e09 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/appdirs.py:89 
        path = os.getenv('XDG_DATA_HOME', os.path.expanduser("~/.local/share"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ad649165c56c896 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/appdirs.py:144 
        path = os.getenv('XDG_DATA_DIRS',
                         os.pathsep.join(['/usr/local/share', '/usr/share']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #faeb57a3973403eb — Environment-variable access.
pkgs/python/[email protected]/numba/misc/appdirs.py:195 
        path = os.getenv('XDG_CONFIG_HOME', os.path.expanduser("~/.config"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e869393a14360333 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/appdirs.py:240 
        path = os.getenv('XDG_CONFIG_DIRS', '/etc/xdg')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #923f924f7f692947 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/appdirs.py:303 
        path = os.getenv('XDG_CACHE_HOME', os.path.expanduser('~/.cache'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a37216cfbcb52311 — Filesystem access.
pkgs/python/[email protected]/numba/misc/gdb_hook.py:43 
        with open(ptrace_scope_file, 'rt') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b07bb1896992bcae — Filesystem access.
pkgs/python/[email protected]/numba/misc/help/inspector.py:393 
        with open(filename + '.html', 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61d0d53bd75c159d — Filesystem access.
pkgs/python/[email protected]/numba/misc/help/inspector.py:397 
        with open(filename + '.rst', 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c08345e469a0241 — Filesystem access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:54 
        with open(args.sys_json[0], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d344e66d7d966b9a — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:58 
    os.environ['NUMBA_DUMP_ANNOTATION'] = str(int(args.annotate))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1357e4ad0d5df7a8 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:64 
        os.environ['NUMBA_DUMP_HTML'] = str(args.annotate_html[0])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ed64cf4ba7bfff2 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:65 
    os.environ['NUMBA_DUMP_LLVM'] = str(int(args.dump_llvm))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53f6cf6b8b341580 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:66 
    os.environ['NUMBA_DUMP_OPTIMIZED'] = str(int(args.dump_optimized))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aaf6b738aa311ae0 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:67 
    os.environ['NUMBA_DUMP_ASSEMBLY'] = str(int(args.dump_assembly))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68d509bf539adc5a — Filesystem access.
pkgs/python/[email protected]/numba/misc/numba_sysinfo.py:192 
                    with open(cmd[0], 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a792d9bd43f871f6 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_sysinfo.py:298 
        _numba_env_vars: {k: v for (k, v) in os.environ.items()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb9431743d9faa3e — Environment-variable access.
pkgs/python/[email protected]/numba/np/ufunc/parallel.py:671 
_DYLD_WORKAROUND_SET = 'NUMBA_DYLD_WORKAROUND' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73639436aa99937d — Environment-variable access.
pkgs/python/[email protected]/numba/np/ufunc/parallel.py:672 
_DYLD_WORKAROUND_VAL = int(os.environ.get('NUMBA_DYLD_WORKAROUND', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1953e59daf9d466e — Filesystem access.
pkgs/python/[email protected]/numba/pycc/compiler.py:196 
        with open(output, 'wb') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f77b5dd72a7355c9 — Filesystem access.
pkgs/python/[email protected]/numba/pycc/compiler.py:202 
        with open(output, 'wb') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a1ad85d9b5375f9 — Filesystem access.
pkgs/python/[email protected]/numba/pycc/compiler.py:214 
        with open(fname + '.h', 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26a4744057086061 — Filesystem access.
pkgs/python/[email protected]/numba/pycc/decorators.py:43 
        with open(ifile) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8642507914f60506 — Filesystem access.
pkgs/python/[email protected]/numba/pycc/platform.py:35 
        ntf = open(os.path.join(tmpdir, "temp%s" % suffix), 'wt')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7627e2fd46c0051b — Environment-variable access.
pkgs/python/[email protected]/numba/pycc/platform.py:218 
        sh = os.environ.get('SHELL', '/bin/sh')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #84dbd37ead010dae — Filesystem access.
pkgs/python/[email protected]/numba/scripts/generate_lower_listing.py:164 
        with open(path, 'w') as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ea43b1bfb224ad4 — Filesystem access.
pkgs/python/[email protected]/numba/testing/_runtests.py:92 
        with open(self.cache_filename, 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20918b0a9e089cee — Filesystem access.
pkgs/python/[email protected]/numba/testing/_runtests.py:108 
            fobj = open(self.cache_filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8711dc7d892ffabd — Filesystem access.
pkgs/python/[email protected]/numba/testing/notebook.py:42 
        with open(notebook) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ee3356a56fbc84b — Environment-variable access.
pkgs/python/[email protected]/runtests.py:5 
if bool(os.environ.get('NUMBA_USE_TYPEGUARD')):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5430676f46c8aab7 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:12 
os.environ['NUMBA_DEVELOPER_MODE'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3e60919b8536681 — Environment-variable access.
pkgs/python/[email protected]/setup.py:215 
        path2check += [os.getenv(n, '') for n in ['CONDA_PREFIX', 'PREFIX']]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87a28254927df991 — Environment-variable access.
pkgs/python/[email protected]/setup.py:263 
    if os.getenv("NUMBA_DISABLE_TBB"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7159d61aaebc983f — Environment-variable access.
pkgs/python/[email protected]/setup.py:267 
        tbb_root = os.getenv('TBBROOT')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12f9e706751d267b — Environment-variable access.
pkgs/python/[email protected]/setup.py:297 
    if os.getenv('NUMBA_DISABLE_OPENMP'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa0cece30caf4afe — Filesystem access.
pkgs/python/[email protected]/setup.py:409 
with open('README.rst') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c079790e5c756d8 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:584 
        f = open(versionfile_abs, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e59a9be4e1a1025f — Filesystem access.
pkgs/python/[email protected]/versioneer.py:739 
        f = open(".gitattributes", "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69efe69b77f027aa — Filesystem access.
pkgs/python/[email protected]/versioneer.py:748 
        f = open(".gitattributes", "a+")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #546a2620aa34aea8 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:785 
        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #010e8db2dc6e1534 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:800 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d84af3ce9711dc9a — Filesystem access.
pkgs/python/[email protected]/versioneer.py:906 
            with open(target_versionfile, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0662f2881571ed6a — Filesystem access.
pkgs/python/[email protected]/versioneer.py:918 
            with open(target_versionfile, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d1510bbd378f316 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:923 
            with open(versionfile_source, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fffc4c8ffae5aa49 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:948 
        with open(target_versionfile, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2d73e6dd26073a6 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:972 
        with open(versionfile_source, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cae5d9d662bd1ce2 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:984 
                with open(ipy, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c518dfab15538c75 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:990 
                with open(ipy, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05bdb3fe15dadd80 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:1005 
            with open(manifest_in, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d3441100325c167 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:1018 
            with open(manifest_in, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1183ddf267173880 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:1025 
            with open(manifest_in, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

packaging

python dependency
expand_more 3 low-confidence finding(s)
low env_fs tooling reachable #c752f0438504295b — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:11 
with open(os.path.join(_BASE_DIR, "src", "packaging", "__init__.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9531c4e1a7eec80b — Filesystem access.
pkgs/python/[email protected]/src/packaging/_manylinux.py:34 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #337f5a010250f5b9 — Filesystem access.
pkgs/python/[email protected]/src/packaging/_musllinux.py:46 
        with open(executable, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pandas

python dependency
expand_more 28 low-confidence finding(s)
low env_fs dependency Excluded from app score #d9dcd159e5a9ccdc — Filesystem access.
pkgs/python/[email protected]/generate_pxi.py:8 
    with open(pxifile, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20ad6f6623af9fd9 — Filesystem access.
pkgs/python/[email protected]/generate_pxi.py:12 
    with open(outfile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec8ad4c991719d0a — Environment-variable access.
pkgs/python/[email protected]/generate_version.py:25 
    if os.environ.get("MESON_DIST_ROOT"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61a6e578ec349b13 — Environment-variable access.
pkgs/python/[email protected]/generate_version.py:26 
        path = os.path.join(os.environ.get("MESON_DIST_ROOT"), path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a10576d57b36e93f — Filesystem access.
pkgs/python/[email protected]/generate_version.py:27 
    with open(path, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16d9086932cef13c — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:76 
                    del os.environ["TZ"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a1884834ce4bc46 — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:80 
                os.environ["TZ"] = tz

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #587422609aa9a350 — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:85 
    orig_tz = os.environ.get("TZ")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df869c45dada28e3 — Filesystem access.
pkgs/python/[email protected]/pandas/_version.py:159 
        with open(versionfile_abs, encoding="utf-8") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4675527b2aedf7e6 — Environment-variable access.
pkgs/python/[email protected]/pandas/_version.py:264 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db848efe6407025a — Environment-variable access.
pkgs/python/[email protected]/pandas/compat/__init__.py:154 
    return os.environ.get("PANDAS_CI", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57def9f110818dbe — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:425 
        if os.environ.get("PANDAS_COPY_ON_WRITE", "0") == "warn"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68841bf326370a3e — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:426 
        else os.environ.get("PANDAS_COPY_ON_WRITE", "1") == "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eea1f7ff965b88fa — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:878 
        False if os.environ.get("PANDAS_FUTURE_INFER_STRING", "1") == "0" else True,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ed0fc0e9bad8849 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:895 
        os.environ.get("PANDAS_FUTURE_DISTINGUISH_NAN_AND_NA", "0") == "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22d20d5b621a6116 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:906 
        False if os.environ.get("PANDAS_FUTURE_PYTHON_SCALARS", "0") == "0" else True,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73b05f94d79b0765 — Filesystem access.
pkgs/python/[email protected]/pandas/core/series.py:1573 
            with open(buf, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a15b560d87138bc0 — Environment-variable access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:74 
HAS_DISPLAY = os.getenv("DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78909f07d63b462e — Filesystem access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:302 
        with open("/dev/clipboard", "w", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1f34deea172dc71 — Filesystem access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:306 
        with open("/dev/clipboard", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a583c8ee357dcefb — Environment-variable access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:569 
        if os.environ.get("WAYLAND_DISPLAY") and _executable_exists("wl-copy"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d07bd652bdf06c9 — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:930 
            handle = open(
                handle,
                ioargs.mode,
                encoding=ioargs.encoding,
                errors=errors,
                newline="",
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0187beecd11e7b0a — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:939 
            handle = open(handle, ioargs.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43b3f209785642af — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:1192 
        handle = open(handle, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed4ca08f2a929c55 — Filesystem access.
pkgs/python/[email protected]/pandas/io/formats/format.py:1076 
        with open(buf, "w", encoding=encoding, newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7ef12190d52521a — Environment-variable access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:57 
        "LC_ALL": os.environ.get("LC_ALL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3ab7b281ae802ee — Environment-variable access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:58 
        "LANG": os.environ.get("LANG"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8cc56286705e5245 — Filesystem access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:148 
            with open(as_json, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pypinyin

python dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #7539a5cd147346f6 — Environment-variable access.
pkgs/python/[email protected]/pypinyin/constants.py:15 
if os.environ.get('PYPINYIN_NO_PHRASES'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72fa83614ff22615 — Environment-variable access.
pkgs/python/[email protected]/pypinyin/constants.py:25 
if not os.environ.get('PYPINYIN_NO_DICT_COPY'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7374cada49fa1f30 — Filesystem access.
pkgs/python/[email protected]/pypinyin/phrases_dict.py:16 
    with open(_json_path, encoding='utf8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e70888298decffc6 — Filesystem access.
pkgs/python/[email protected]/pypinyin/pinyin_dict.py:15 
    with open(_json_path, encoding='utf8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #729fb3578c30f960 — Filesystem access.
pkgs/python/[email protected]/setup.py:41 
    with open(os.path.join(current_dir, 'pypinyin/__init__.py'),
              encoding='utf8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51bc5c424904d191 — Filesystem access.
pkgs/python/[email protected]/setup.py:49 
    with open(os.path.join(current_dir, 'README.rst'),
              encoding='utf8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pyyaml

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #7bdf6d5ec692c86c — Environment-variable access.
pkgs/python/[email protected]/setup.py:72 
os.environ['SETUPTOOLS_USE_DISTUTILS'] = 'local'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f35a859155067ae4 — Environment-variable access.
pkgs/python/[email protected]/setup.py:81 
if 'sdist' in sys.argv or os.environ.get('PYYAML_FORCE_CYTHON') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d907cccace7864b — Environment-variable access.
pkgs/python/[email protected]/setup.py:160 
            with_ext = getattr(self, ext.attr_name) or os.environ.get('PYYAML_FORCE_{0}'.format(ext.feature_name.upper()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

scikit-learn

python dependency
expand_more 50 low-confidence finding(s)
low env_fs dependency Excluded from app score #37bbce9f7faf52e5 — Environment-variable access.
pkgs/python/[email protected]/doc/conf.py:122 
if os.environ.get("NO_MATHJAX"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5197c4ff48c284cf — Filesystem access.
pkgs/python/[email protected]/doc/conf.py:622 
            with open(readme, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20c1a4de391641ae — Filesystem access.
pkgs/python/[email protected]/doc/conf.py:819 
    with open(searchindex_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ae4dec0fb2dc16c — Filesystem access.
pkgs/python/[email protected]/doc/conf.py:825 
    with open(searchindex_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16af6464b71f0ae1 — Environment-variable access.
pkgs/python/[email protected]/doc/conf.py:884 
if os.environ.get("SKLEARN_WARNINGS_AS_ERRORS", "0") != "0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e3a1b651df379f9 — Environment-variable access.
pkgs/python/[email protected]/doc/conf.py:975 
github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9165af108a1391b — Environment-variable access.
pkgs/python/[email protected]/doc/conftest.py:49 
    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #71443772f3b08946 — Filesystem access.
pkgs/python/[email protected]/examples/applications/plot_out_of_core_classification.py:171 
        assert sha256(archive_path.read_bytes()).hexdigest() == ARCHIVE_SHA256

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #27518667eba526d5 — Filesystem access.
pkgs/python/[email protected]/examples/applications/plot_out_of_core_classification.py:180 
        for doc in parser.parse(open(filename, "rb")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #b4292a22e57e83d2 — Filesystem access.
pkgs/python/[email protected]/examples/applications/wikipedia_principal_eigenvector.py:60 
        with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #660989575c9415da — Environment-variable access.
pkgs/python/[email protected]/sklearn/__init__.py:56 
os.environ.setdefault("KMP_DUPLICATE_LIB_OK", "True")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1168d2f7ecd5230f — Environment-variable access.
pkgs/python/[email protected]/sklearn/__init__.py:60 
os.environ.setdefault("KMP_INIT_AT_FORK", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a052c04e05db358e — Environment-variable access.
pkgs/python/[email protected]/sklearn/__init__.py:145 
    _random_seed = os.environ.get("SKLEARN_SEED", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9a064f2f17becd9 — Filesystem access.
pkgs/python/[email protected]/sklearn/_build_utils/tempita.py:22 
    with open(fromfile, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e98afc8aa45eda8b — Filesystem access.
pkgs/python/[email protected]/sklearn/_build_utils/tempita.py:28 
    with open(outfile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03d1b6e20bda68dc — Filesystem access.
pkgs/python/[email protected]/sklearn/_build_utils/version.py:11 
data = open(sklearn_init).readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a25bada9c70b66e6 — Environment-variable access.
pkgs/python/[email protected]/sklearn/_config.py:11 
    "assume_finite": bool(os.environ.get("SKLEARN_ASSUME_FINITE", False)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb926dbf1d960986 — Environment-variable access.
pkgs/python/[email protected]/sklearn/_config.py:12 
    "working_memory": int(os.environ.get("SKLEARN_WORKING_MEMORY", 1024)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75f9e148e9674c05 — Environment-variable access.
pkgs/python/[email protected]/sklearn/_config.py:16 
        os.environ.get("SKLEARN_PAIRWISE_DIST_CHUNK_SIZE", 256)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5135e291d87b23e4 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:62 
    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d879453224ed912a — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:89 
    environ.get("SKLEARN_RUN_FLOAT32_TESTS", "0") != "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52d9caa8fdc74fb2 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:102 
    download_if_missing = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7da55541efcc6097 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:139 
    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f178d95f38fa94ad — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:172 
    worker_id = environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a23e0b377ab88e36 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:398 
    random_seed_var = environ.get("SKLEARN_TESTS_GLOBAL_RANDOM_SEED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d07aaff81c7bbb0f — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:450 
    xdist_worker_count = environ.get("PYTEST_XDIST_WORKER_COUNT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9954c2d708d78859 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:457 
    if environ.get("SKLEARN_WARNINGS_AS_ERRORS", "0") != "0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25e6fcd4ca4cb630 — Environment-variable access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:83 
        data_home = environ.get("SCIKIT_LEARN_DATA", join("~", "scikit_learn_data"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c119d18ad58ebaef — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:309 
            data.append(Path(filename).read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3230c434dea5a36c — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:489 
    return path.read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bf23f9272f054cd — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:1428 
    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8244c54a0c537f7 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_lfw.py:441 
    with open(index_file_path, "rb") as index_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efda7958b2fb455f — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_svmlight_format_io.py:197 
        return open(f, "rb", closefd=False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b206b68f5c5a0078 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_svmlight_format_io.py:213 
        return open(f, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #393066249b6f6aa1 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_svmlight_format_io.py:590 
        with open(f, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21f957186b54c1c3 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_twenty_newsgroups.py:96 
    with open(cache_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a512711374a97da — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_twenty_newsgroups.py:307 
            with open(cache_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9af44981ddc3cf6b — Filesystem access.
pkgs/python/[email protected]/sklearn/feature_extraction/text.py:232 
            with open(doc, "rb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4153b094b6d2fc11 — Filesystem access.
pkgs/python/[email protected]/sklearn/tree/_export.py:929 
            out_file = open(out_file, "w", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d99e8880cd4fe27 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_array_api.py:182 
    if os.environ.get("SCIPY_ARRAY_API") != "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c85a19a4ebc113d — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:20 
    estimator_css = estimator_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7df2dde5bccbd8e5 — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:21 
    params_css = params_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77b91e0e1d03f424 — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:22 
    features_css = features_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc4141fc648a749a — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:563 
        with open(str(Path(__file__).parent / "estimator.js"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6a1a9247ebed049 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:367 
    if int(os.environ.get("SKLEARN_SKIP_NETWORK_TESTS", 0)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d0afaf614077807 — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:926 
        with open(source_file, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33c4ef601c08afd3 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:930 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06156c602f4a4519 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:937 
        coverage_rc = os.environ.get("COVERAGE_PROCESS_START")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfdfa1a2ca482898 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:1334 
    if os.environ.get("SCIPY_ARRAY_API") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63643deef4e52278 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:1363 
        if os.getenv("PYTORCH_ENABLE_MPS_FALLBACK") != "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

soundfile

python dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #3a59d0421ca3841d — Environment-variable access.
pkgs/python/[email protected]/setup.py:8 
platform = os.environ.get('PYSOUNDFILE_PLATFORM', sys.platform)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #325f1a48764579e8 — Environment-variable access.
pkgs/python/[email protected]/setup.py:9 
architecture0 = os.environ.get('PYSOUNDFILE_ARCHITECTURE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a63432db7d8c928 — Filesystem access.
pkgs/python/[email protected]/setup.py:76 
with open('soundfile.py') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d9b339b6d264913 — Filesystem access.
pkgs/python/[email protected]/setup.py:117 
    long_description=open('README.rst').read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c70e44d21692823 — Environment-variable access.
pkgs/python/[email protected]/soundfile_build.py:138 
platform = os.environ.get('PYSOUNDFILE_PLATFORM', sys.platform)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tqdm

python dependency
expand_more 15 low-confidence finding(s)
low env_fs dependency Excluded from app score #fc9261d12b1624d9 — Filesystem access.
pkgs/python/[email protected]/.meta/mkcompletion.py:59 
    (Path(__file__).resolve().parent.parent / 'tqdm' / 'completion.sh').write_text(
        completion, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96374754d3393ac3 — Filesystem access.
pkgs/python/[email protected]/.meta/mkdocs.py:51 
README_rst = (src_dir / '.readme.rst').read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #388d9bb49e076223 — Filesystem access.
pkgs/python/[email protected]/.meta/mkdocs.py:93 
man = (src_dir / '.tqdm.1.md').read_text() + man

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c0c842e21625732 — Filesystem access.
pkgs/python/[email protected]/.meta/mkdocs.py:104 
    (src_dir.parent / 'README.rst').write_text(README_rst, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b73201075a766f57 — Filesystem access.
pkgs/python/[email protected]/.meta/mksnap.py:65 
    (Path(__file__).resolve().parent.parent / 'snapcraft.yaml').write_text(
        snap_yml.decode('utf-8') if hasattr(snap_yml, 'decode') else snap_yml, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #bb60a3c8d2a5a9cb — Filesystem access.
pkgs/python/[email protected]/examples/7zx.py:82 
            with open(md, buffering=1) as m:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #6b412508268eff8d — Filesystem access.
pkgs/python/[email protected]/examples/tqdm_requests.py:31 
with open(eg_out, "wb") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #43765af17c535da5 — Filesystem access.
pkgs/python/[email protected]/examples/tqdm_requests.py:44 
    open(eg_out, "wb"), "write",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #232e2c415c75241f — Filesystem access.
pkgs/python/[email protected]/examples/tqdm_wget.py:106 
with tqdm.wrapattr(open(eg_out, "wb"), "write",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3caf949c7e914ce7 — Environment-variable access.
pkgs/python/[email protected]/tqdm/autonotebook.py:15 
        if any(i == 'QT_API' or i.startswith('SPYDER') for i in os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3a04a787a697918 — Filesystem access.
pkgs/python/[email protected]/tqdm/cli.py:270 
                dst.write_bytes(fi.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b5f11bd88704587 — Environment-variable access.
pkgs/python/[email protected]/tqdm/contrib/bells.py:17 
if getenv("TQDM_SLACK_TOKEN") and getenv("TQDM_SLACK_CHANNEL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97daea1d7aa11272 — Environment-variable access.
pkgs/python/[email protected]/tqdm/contrib/bells.py:19 
elif getenv("TQDM_TELEGRAM_TOKEN") and getenv("TQDM_TELEGRAM_CHAT_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c05141cc8035c2c — Environment-variable access.
pkgs/python/[email protected]/tqdm/contrib/bells.py:21 
elif getenv("TQDM_DISCORD_TOKEN") and getenv("TQDM_DISCORD_CHANNEL_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1781cef75c36aab — Environment-variable access.
pkgs/python/[email protected]/tqdm/utils.py:50 
            (k[i:].lower(), v) for k, v in os.environ.items() if k.startswith(prefix))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

umap-learn

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #b1668c9297d9d95c — Filesystem access.
pkgs/python/[email protected]/umap/parametric_umap.py:500 
            with open(model_output, "wb") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18b80d316d1713ba — Filesystem access.
pkgs/python/[email protected]/umap/parametric_umap.py:1002 
    model = pickle.load((open(model_output, "rb")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

unidecode

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #8edd9230515f1182 — Filesystem access.
pkgs/python/[email protected]/setup.py:9 
    with open(os.path.join(os.path.dirname(__file__), "README.rst"), encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c537f2f3052141d — Filesystem access.
pkgs/python/[email protected]/unidecode/util.py:34 
            stream = open(args.path, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • numpy prod — extract failed: not a gzip file
  • scipy prod — sdist exceeds byte cap
  • torch prod — no sdist (wheels only)
  • torchaudio prod — no sdist (wheels only)
  • pysbd prod — no sdist (wheels only)
  • matplotlib prod — sdist exceeds byte cap
  • spacy prod — no sdist (wheels only)