Close Open Privacy Scan
App Privacy Score
Low risk · 49 finding(s)
Based on: 3 first-party package(s) · 8/8 deps analyzed
Dependency score: 82 (Low risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
aka.msapi.slack.comapi.telegram.orgatlas.nomic.aiconsole.groq.comconsole.mistral.aicore.telegram.orgdiscord.comdiscord.ggdiscordpy.readthedocs.iodocs.gpt4all.iodocs.python.orgen.wikipedia.orggithub.comgpt4all.iogroq.comhttpbin.orghuggingface.coipywidgets.readthedocs.iomistral.aiopenai.complatform.openai.compt.wikipedia.orgpypi.orgrequests.readthedocs.iostackoverflow.comterms.naer.edu.twtqdm.github.iowww.nomic.aiwww.python.orgzh.wikipedia.org
</> First-Party Code
first-party (python): gpt4all-bindings/python
python first-partyexpand_more 4 low-confidence finding(s)
resp = requests.get("https://gpt4all.io/models/models3.json")Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
response = requests.get(url, stream=True, headers=headers)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs — Filesystem access. 2 locations
</> Dependencies
importlib_resources
python dependencyexpand_more 3 low-confidence finding(s)
jinja2
python dependencyexpand_more 7 low-confidence finding(s)
low env_fs — Filesystem access. 6 locations
code = self.client.get(self.prefix + bucket.key)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.