Close Open Privacy Scan

link https://github.com/scikit-learn/scikit-learn

bolt Snapshot: commit 5a349c8

science engine v1.21

schedule 2026-07-20T03:07:45.854104+00:00

update Scan engine updated since this result

App Privacy Score

22 /100

High privacy risk — possible application leak

High risk · 1802 finding(s)

Dependency score: 72 (Medium risk)

bar_chart Score Breakdown

pii_flow −60

egress −15

env_fs −3

list Scan Summary

0 high 5 medium 1797 low

First-party packages: 1

Dependency packages: 14

Ecosystem: python

swap_horiz Potential data exfiltration in application code

External domains: 1.2.3.4academic.oup.comaclweb.orgaddress.localaggregate.ee.engr.uky.eduanaconda-repo.devanaconda.comanaconda.organalyticphysics.comapi.anaconda.orgapi.figshare.comapi.github.comapi.nuget.orgarchive.ics.uci.eduarrow.apache.orgarstechnica.comartowen.su.domainsarxiv.orgavatars2.githubusercontent.combar.combitbucket.orgblogs.mathworks.combmva-archive.org.ukbugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgbugzilla.redhat.comcc0textures.comcdn.datatables.netcdn.jsdelivr.netcdn.mathjax.orgcdn.plot.lycdn.rawgit.comcdn.struffelproductions.comcdnjs.cloudflare.comcellprofiler.orgcens.ioc.eecgi.di.uoa.grchart-studio.plotly.comciteseerx.ist.psu.educmm.ensmp.frcode.google.comcode.jquery.comcollaboration.cmc.ec.gc.cacolorbrewer2.orgcommons.wikimedia.orgcommunity.plot.lyconda.anaconda.orgconda.iocoverage.readthedocs.iocran.r-project.orgcrates.iocreativecommons.orgcs.nyu.educseweb.ucsd.educve.mitre.orgcvlab.epfl.chcython.orgcython.readthedocs.iod3js.orgdash.plot.lydask.pydata.orgdata-apis.orgdataverse.orgdeveloper.mozilla.orgdigitalassets.lib.berkeley.edudistributed.dask.orgdl.acm.orgdmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.bodo.aidocs.dask.orgdocs.enthought.comdocs.github.comdocs.mapbox.comdocs.microsoft.comdocs.pola.rsdocs.pytest.orgdocs.python.orgdocs.rapids.aidocs.rsdocs.scipydocs.scipy.orgdocs.sqlalchemy.orgdoi.orgdspace.mit.eduduckdb.orgen.cppreference.comen.wikipedia.orgen.wikiversity.orgen.wiktionary.orgentropymine.comepub.ub.uni-muenchen.deepubs.siam.orgexslt.orgfa.bianp.netfiji.scflic.krforum.image.scftp.iis.sinica.edu.twgcc.gnu.orggeoffboeing.comggplot2.tidyverse.orggist.github.comgithub.comgitlab.comgitlab.freedesktop.orggraphics.stanford.edugroups.google.comhal.archives-ouvertes.frhal.inria.frhastie.su.domainshdl.handle.nethg.python.orghome.olemiss.eduhomepages.ecs.vuw.ac.nzhost.comhtml.spec.whatwg.orghttpbin.orghubblesite.orgi.stanford.eduieeexplore.ieee.orgimageio.readthedocs.ioimagej.netimages-wixmp-ed30a86b8c4ca887773594c2.wixmp.cominf.ufrgs.bripython.orgj3-fortran.orgjmlr.csail.mit.edujmlr.orgjoblib.readthedocs.iojournals.plos.orgjse.amstat.orgjson-schema.orglara.epfl.chlark-parser.readthedocs.iolear.inrialpes.frlib.stat.cmu.edulibsdl.orglink.springer.comlivelovely.comlvdmaaten.github.iomaplibre.orgmarkfairchild.orgmarshmallow.readthedocs.orgmathworld.wolfram.commatplotlib.orgmedium.commembers.chello.atmesonbuild.commetacpan.orgmicrosoft.commitpress.mit.edumplab.ucsd.edumrl.nyu.edumsdn.microsoft.commybinder.orgmypy.readthedocs.ionarwhals-dev.github.iondownloader.figshare.comnetpbm.sourceforge.netnicolas.limare.netnlp.stanford.edunumba.readthedocs.ionumexpr.readthedocs.ionumpy.orgnumpydoc.readthedocs.ioold.vscht.czopenclipart.orgopensource.orgpackages.msys2.orgpackaging.python.orgpages.cs.wisc.edupandas.pydata.orgpapers.nips.ccparquet.apache.orgpaulbourke.netpeak.telecommunity.compeople.cs.umass.edupeople.csail.mit.edupeople.eecs.berkeley.edupeople.iee.ihu.grpeps.python.orgpersonal.math.ubc.capillow.readthedocs.iopillow.readthedocs.orgpivchallenge.orgpixi.shplatformdirs.readthedocs.ioplot.lyplotly.compluggy.readthedocs.iopoynton.capresbrey.mit.eduprism.ucalgary.caproceedings.neurips.ccprojecteuclid.orgpsutil.readthedocs.iopygments.orgpyinstaller.readthedocs.iopyperclip.readthedocs.iopypi.anaconda.orgpypi.orgpypi.python.orgpytest.orgpython-lz4.readthedocs.iopython-poetry.orgraw.githubusercontent.comrefspecs.linuxfoundation.orgrepo.anaconda.comrepositories.cdlib.orgrob.schapire.netschemas.microsoft.comschematics.readthedocs.ioscikit-image.orgscikit-learn.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgseaborn.pydata.orgserverfault.comsetuptools.pypa.iosimpleitk.orgsipi.usc.edusites.google.comskops.readthedocs.iosome-repository.orgsome.domainsome.link.comsomething.comsourceware.orgspacetelescope.github.iosparse.pydata.orgspecs.frictionlessdata.iostackoverflow.comstat.uw.edustats.stackexchange.comstatweb.stanford.edusupport.sas.comtechnet.microsoft.comtel.archives-ouvertes.frtinyurl.comtminka.github.iotoblerity.orgtog.acm.orgtools.ietf.orgtrifacta.github.comtruststore.readthedocs.iotwitter.comtyping.python.orgupload.pypi.orguser.engineering.uiowa.eduusers.cs.cf.ac.ukusers.jyu.fiusers.polytech.unice.frvassarstats.netviews.scientific-python.orgvincentarelbundock.github.iovis-www.cs.umass.eduvita.had.co.nzweb.archive.orgweb.math.ucsb.eduweb.stanford.eduwiki.cython.orgwiki.python.orgwixtoolset.orgwrapdb.mesonbuild.comwrobstory.github.ioww3.math.ucla.eduwww.ams.orgwww.apache.orgwww.astropy.orgwww.bestofmedia.comwww.bramvandersanden.comwww.brooklynmuseum.orgwww.brucelindbloom.comwww.busim.ee.boun.edu.trwww.cbsr.ia.ac.cnwww.cl.cam.ac.ukwww.clear.rice.eduwww.codeproject.comwww.conda.iowww.cosc.canterbury.ac.nzwww.cs.cornell.eduwww.cs.princeton.eduwww.cs.qub.ac.ukwww.cs.sfu.cawww.cs.technion.ac.ilwww.cs.toronto.eduwww.cs.ubc.cawww.cs.ucl.ac.ukwww.cs.waikato.ac.nzwww.csie.ntu.edu.twwww.data-publica.comwww.dbs.ifi.lmu.dewww.deviantart.comwww.di.ens.frwww.dirkpadfield.comwww.easyrgb.comwww.ece.rochester.eduwww.ece.ucsb.eduwww.ecma-international.orgwww.edwardrosten.comwww.eecs.tufts.eduwww.epfl.chwww.fatiando.orgwww.figshare.comwww.flickr.comwww.fordfoundation.orgwww.freedesktop.orgwww.gaussianprocess.orgwww.gdal.orgwww.godbole.netwww.google.comwww.graphviz.orgwww.ietf.orgwww.intel.comwww.ipol.imwww.isca-archive.orgwww.iucnredlist.orgwww.iwaenc.orgwww.janeriksolem.netwww.jmlr.orgwww.jstatsoft.orgwww.jstor.orgwww.mapbox.comwww.mars.comwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.mecourse.comwww.merl.comwww.microsoft.comwww.miketipping.comwww.mit.eduwww.mitpressjournals.orgwww.mlpack.orgwww.nasa.govwww.ncbi.nlm.nih.govwww.oasis-open.orgwww.openblas.netwww.openml.orgwww.opm.govwww.oreilly.comwww.osapublishing.orgwww.picloud.comwww.poynton.comwww.python.orgwww.rdocumentation.orgwww.research.ibm.comwww.researchgate.netwww.rfc-editor.orgwww.robots.ox.ac.ukwww.sciencedirect.comwww.scipy.orgwww.some-server.orgwww.somewhere.comwww.sphinx-doc.orgwww.springer.comwww.sri.comwww.stat.berkeley.eduwww.stat.ubc.cawww.stata.comwww.statsmodels.orgwww.stixfonts.orgwww.tandfonline.comwww.textualize.iowww.tu-chemnitz.dewww.utstat.toronto.eduwww.vision.cs.chubu.ac.jpwww.w3.orgwww.x.orgwww.xyz.eduwww.yhat.comwww.zenodo.orgwww5.cs.fau.dexarray.pydata.orgxkcd.comxlrd.readthedocs.ioyadda.icm.edu.plzenodo.org

medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/build_tools/get_comment.py:266 → repo/build_tools/get_comment.py:331

medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/build_tools/github/autoclose_prs.py:25 → repo/build_tools/github/autoclose_prs.py:38

medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/build_tools/github/autoclose_prs.py:25 → repo/build_tools/github/autoclose_prs.py:47

medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/build_tools/github/autoclose_prs.py:25 → repo/build_tools/github/autoclose_prs.py:61

</> First-Party Code

first-party (python)

python first-party

medium pii_flow production #f1708cde7c67ebce — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/build_tools/get_comment.py:331 · flow /tmp/closeopen-fwbuu3r1/repo/build_tools/get_comment.py:266 → /tmp/closeopen-fwbuu3r1/repo/build_tools/get_comment.py:331

            print(message)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #4ba1c1140eafcff9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/build_tools/github/autoclose_prs.py:38 · flow /tmp/closeopen-fwbuu3r1/repo/build_tools/github/autoclose_prs.py:25 → /tmp/closeopen-fwbuu3r1/repo/build_tools/github/autoclose_prs.py:38

print(f"Found {len(prs)} opened PRs with label {label}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #8f7ff83824956507 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/build_tools/github/autoclose_prs.py:47 · flow /tmp/closeopen-fwbuu3r1/repo/build_tools/github/autoclose_prs.py:25 → /tmp/closeopen-fwbuu3r1/repo/build_tools/github/autoclose_prs.py:47

print(f"Found {len(prs)} PRs to autoclose")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow production #d713bf97bad1c4bc — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

repo/build_tools/github/autoclose_prs.py:61 · flow /tmp/closeopen-fwbuu3r1/repo/build_tools/github/autoclose_prs.py:25 → /tmp/closeopen-fwbuu3r1/repo/build_tools/github/autoclose_prs.py:61

    print(f"Closing PR #{pr.number} with comment")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 102 low-confidence finding(s)

low env_fs test-only Excluded from app score #2ff966ec43d935be — Environment-variable access.

repo/.github/scripts/add_or_remove_no_pr_warning.py:16

g = Github(auth=Auth.Token(os.environ["GITHUB_TOKEN"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf885005a6bf9881 — Environment-variable access.

repo/.github/scripts/add_or_remove_no_pr_warning.py:17

repo = g.get_repo(os.environ["GITHUB_REPO"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #16926590a4503562 — Environment-variable access.

repo/.github/scripts/add_or_remove_no_pr_warning.py:18

issue = repo.get_issue(number=int(os.environ["ISSUE_NUMBER"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #10fb0703e2017a2a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/.github/scripts/add_or_remove_no_pr_warning.py:37 · flow /tmp/closeopen-fwbuu3r1/repo/.github/scripts/add_or_remove_no_pr_warning.py:16 → /tmp/closeopen-fwbuu3r1/repo/.github/scripts/add_or_remove_no_pr_warning.py:37

        print(f"Added warning to issue: {os.environ['GITHUB_REPO']}#{issue.number}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs test-only Excluded from app score #9854536d6f48306e — Environment-variable access.

repo/.github/scripts/add_or_remove_no_pr_warning.py:37

        print(f"Added warning to issue: {os.environ['GITHUB_REPO']}#{issue.number}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #56141301a13ba54a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/.github/scripts/add_or_remove_no_pr_warning.py:47 · flow /tmp/closeopen-fwbuu3r1/repo/.github/scripts/add_or_remove_no_pr_warning.py:16 → /tmp/closeopen-fwbuu3r1/repo/.github/scripts/add_or_remove_no_pr_warning.py:47

            print(
                "Removed warning from issue: "
                f"{os.environ['GITHUB_REPO']}#{issue.number}"
            )

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs test-only Excluded from app score #fa26ab9fde34ad67 — Environment-variable access.

repo/.github/scripts/add_or_remove_no_pr_warning.py:49

                f"{os.environ['GITHUB_REPO']}#{issue.number}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #68c730850df41f0b — Environment-variable access.

repo/.github/scripts/label_title_regex.py:10

context_dict = json.loads(os.getenv("CONTEXT_GITHUB"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #75fa8b9ad3bc31df — Filesystem access.

repo/asv_benchmarks/benchmarks/common.py:18

    with open(config_path, "r") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #128ad9a2af6c31d0 — Environment-variable access.

repo/asv_benchmarks/benchmarks/common.py:22

    profile = os.getenv("SKLBENCH_PROFILE", config["profile"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8916c5d61ff9dc19 — Environment-variable access.

repo/asv_benchmarks/benchmarks/common.py:24

    n_jobs_vals_env = os.getenv("SKLBENCH_NJOBS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #412c899bfb540b56 — Environment-variable access.

repo/asv_benchmarks/benchmarks/common.py:37

    save_estimators = os.getenv("SKLBENCH_SAVE_ESTIMATORS", config["save_estimators"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dea77d96e0aca490 — Environment-variable access.

repo/asv_benchmarks/benchmarks/common.py:38

    save_dir = os.getenv("ASV_COMMIT", "new")[:8]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #458882ebf59c3f18 — Environment-variable access.

repo/asv_benchmarks/benchmarks/common.py:43

    base_commit = os.getenv("SKLBENCH_BASE_COMMIT", config["base_commit"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #618834821d8c114c — Environment-variable access.

repo/asv_benchmarks/benchmarks/common.py:45

    bench_predict = os.getenv("SKLBENCH_PREDICT", config["bench_predict"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3d1925933b151620 — Environment-variable access.

repo/asv_benchmarks/benchmarks/common.py:46

    bench_transform = os.getenv("SKLBENCH_TRANSFORM", config["bench_transform"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c4a45abef3fcd8c3 — Filesystem access.

repo/benchmarks/bench_plot_randomized_svd.py:136

    with open(file_name, "rb") as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cbff573ec5f54992 — Filesystem access.

repo/benchmarks/bench_saga.py:243

    with open("bench_saga.json", "w+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf9911087fa3f0a4 — Filesystem access.

repo/benchmarks/bench_saga.py:250

    with open("bench_saga.json", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0f12419a7732d537 — Filesystem access.

repo/benchmarks/bench_tsne_mnist.py:203

            with open(log_filename, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #43d48661567b0b03 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/build_tools/circle/list_versions.py:19

        return json.loads(urlopen(url).read().decode("utf8"))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6a2b2bd8676931b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/build_tools/circle/list_versions.py:88

        html = urlopen(RAW_FMT % name).read().decode("utf8")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #10f3555317094e38 — Filesystem access.

repo/build_tools/circle/list_versions.py:137

with open(args.rst, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #afbc0df62c7d08dd — Filesystem access.

repo/build_tools/circle/list_versions.py:141

with open(args.json, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #7758fc985b7faa70 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/build_tools/generate_authors_table.py:29

        reply = requests.get(url, auth=auth)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #9f77e364abcacb20 — Filesystem access.

repo/build_tools/generate_authors_table.py:218

    with open(
        REPO_FOLDER / "doc" / "maintainers.rst", "w+", encoding="utf-8"
    ) as rst_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #430f38a14286b053 — Filesystem access.

repo/build_tools/generate_authors_table.py:223

    with open(
        REPO_FOLDER / "doc" / "maintainers_emeritus.rst", "w+", encoding="utf-8"
    ) as rst_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #deec75752c0fed74 — Filesystem access.

repo/build_tools/generate_authors_table.py:228

    with open(
        REPO_FOLDER / "doc" / "contributor_experience_team.rst", "w+", encoding="utf-8"
    ) as rst_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2596c6110a918c0a — Filesystem access.

repo/build_tools/generate_authors_table.py:233

    with open(
        REPO_FOLDER / "doc" / "contributor_experience_team_emeritus.rst",
        "w+",
        encoding="utf-8",
    ) as rst_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #98d5e061f81f5179 — Filesystem access.

repo/build_tools/generate_authors_table.py:240

    with open(
        REPO_FOLDER / "doc" / "communication_team.rst", "w+", encoding="utf-8"
    ) as rst_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0a0001c7f6d9bb8 — Filesystem access.

repo/build_tools/generate_authors_table.py:245

    with open(
        REPO_FOLDER / "doc" / "communication_team_emeritus.rst", "w+", encoding="utf-8"
    ) as rst_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6369dd153658d74 — Filesystem access.

repo/build_tools/generate_authors_table.py:250

    with open(
        REPO_FOLDER / "doc" / "documentation_team.rst", "w+", encoding="utf-8"
    ) as rst_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e32924f5dde7204 — Filesystem access.

repo/build_tools/get_comment.py:23

    with open(versions_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de4bd2e4ab92931a — Filesystem access.

repo/build_tools/get_comment.py:70

    with open(log_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f22746b50156254f — Environment-variable access.

repo/build_tools/get_comment.py:265

    repo_str = os.environ["GITHUB_REPOSITORY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #535a005f070c28b2 — Environment-variable access.

repo/build_tools/get_comment.py:266

    token = os.environ["GITHUB_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #911f0a2781476b7c — Environment-variable access.

repo/build_tools/get_comment.py:267

    pr_number = os.environ["PR_NUMBER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d381341155699d28 — Environment-variable access.

repo/build_tools/get_comment.py:268

    sha = os.environ["BRANCH_SHA"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bb8c88a6ac0b2a1e — Environment-variable access.

repo/build_tools/get_comment.py:269

    log_file = os.environ["LOG_FILE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05e42645a32fb491 — Environment-variable access.

repo/build_tools/get_comment.py:270

    run_id = os.environ["RUN_ID"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1286765f75af7264 — Environment-variable access.

repo/build_tools/get_comment.py:271

    versions_file = os.environ["VERSIONS_FILE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c69deee52a2e8e1a — Environment-variable access.

repo/build_tools/github/autoclose_prs.py:25

github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7a1938609b43d5e — Filesystem access.

repo/build_tools/github/vendor.py:25

    with open(distributor_init, "wt") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cd308a0661cd094d — Filesystem access.

repo/build_tools/update_environments_and_lock_files.py:594

    output_path.write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e0ea56abdd41cdb — Filesystem access.

repo/build_tools/update_environments_and_lock_files.py:669

    output_path.write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a1595facb1a94f5 — Filesystem access.

repo/build_tools/wheels/check_license.py:23

license_text = (distinfo_path / "licenses" / "COPYING").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cfe7344dc4dfb5ec — Environment-variable access.

repo/doc/conf.py:121

if os.environ.get("NO_MATHJAX"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83c605d78ce9b771 — Filesystem access.

repo/doc/conf.py:613

            with open(readme, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78f9e856de092ca7 — Filesystem access.

repo/doc/conf.py:807

    with open(searchindex_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79b870954059cfe5 — Filesystem access.

repo/doc/conf.py:813

    with open(searchindex_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #64b0caf46c1ccd76 — Environment-variable access.

repo/doc/conf.py:872

if os.environ.get("SKLEARN_WARNINGS_AS_ERRORS", "0") != "0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7fd2daff31dd698 — Environment-variable access.

repo/doc/conf.py:963

github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #dde5fbebd425f6fa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/doc/conf.py:982

            urlopen(html_theme_options["switcher"]["json_url"], timeout=10).read()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #533076429f8d11a3 — Environment-variable access.

repo/doc/conftest.py:49

    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4eb1eeb2b3a459f3 — Filesystem access.

repo/examples/applications/plot_out_of_core_classification.py:171

        assert sha256(archive_path.read_bytes()).hexdigest() == ARCHIVE_SHA256

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #df7f25e8b047570d — Filesystem access.

repo/examples/applications/plot_out_of_core_classification.py:180

        for doc in parser.parse(open(filename, "rb")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #cb49cce0cee56cbe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/examples/applications/wikipedia_principal_eigenvector.py:59

        opener = urlopen(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #bb8bbbf5ce117fb7 — Filesystem access.

repo/examples/applications/wikipedia_principal_eigenvector.py:60

        with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #c60f641b2def46ea — Hardcoded external endpoint. Review what data is sent to this destination.

repo/maint_tools/bump-dependencies-versions.py:11

response = requests.get("https://peps.python.org/api/release-cycle.json")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #67df6d3ccf4a45b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/maint_tools/bump-dependencies-versions.py:24

    response = requests.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c73583de43244307 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/maint_tools/bump-dependencies-versions.py:86

    response = requests.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #e173311bb134559c — Filesystem access.

repo/maint_tools/bump-dependencies-versions.py:128

    content = Path("pyproject.toml").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de53f7d0d3c9b377 — Environment-variable access.

repo/sklearn/__init__.py:56

os.environ.setdefault("KMP_DUPLICATE_LIB_OK", "True")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #518888476035feb5 — Environment-variable access.

repo/sklearn/__init__.py:60

os.environ.setdefault("KMP_INIT_AT_FORK", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0b347c2f6a20e00 — Environment-variable access.

repo/sklearn/__init__.py:145

    _random_seed = os.environ.get("SKLEARN_SEED", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #276d4d200ee4723c — Filesystem access.

repo/sklearn/_build_utils/tempita.py:22

    with open(fromfile, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c937da6315571587 — Filesystem access.

repo/sklearn/_build_utils/tempita.py:28

    with open(outfile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b99064725bf1998 — Filesystem access.

repo/sklearn/_build_utils/version.py:11

data = open(sklearn_init).readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6449457800a58492 — Environment-variable access.

repo/sklearn/_config.py:11

    "assume_finite": bool(os.environ.get("SKLEARN_ASSUME_FINITE", False)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cd21f88c3aed024a — Environment-variable access.

repo/sklearn/_config.py:12

    "working_memory": int(os.environ.get("SKLEARN_WORKING_MEMORY", 1024)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e95763ab1b8ff161 — Environment-variable access.

repo/sklearn/_config.py:16

        os.environ.get("SKLEARN_PAIRWISE_DIST_CHUNK_SIZE", 256)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b1bbb8710347392 — Environment-variable access.

repo/sklearn/conftest.py:62

    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23d77e7852a375c7 — Environment-variable access.

repo/sklearn/conftest.py:89

    environ.get("SKLEARN_RUN_FLOAT32_TESTS", "0") != "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #457dcf01683b8981 — Environment-variable access.

repo/sklearn/conftest.py:102

    download_if_missing = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18c606623cc57bec — Environment-variable access.

repo/sklearn/conftest.py:139

    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca1a51bc9dd0e7f4 — Environment-variable access.

repo/sklearn/conftest.py:172

    worker_id = environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e045a02e7fac85e — Environment-variable access.

repo/sklearn/conftest.py:398

    random_seed_var = environ.get("SKLEARN_TESTS_GLOBAL_RANDOM_SEED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41e02babaead174e — Environment-variable access.

repo/sklearn/conftest.py:450

    xdist_worker_count = environ.get("PYTEST_XDIST_WORKER_COUNT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #172043bf9e3953f2 — Environment-variable access.

repo/sklearn/conftest.py:457

    if environ.get("SKLEARN_WARNINGS_AS_ERRORS", "0") != "0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fe725304638a451c — Environment-variable access.

repo/sklearn/datasets/_base.py:83

        data_home = environ.get("SCIKIT_LEARN_DATA", join("~", "scikit_learn_data"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #98ba05f75a36fe0e — Filesystem access.

repo/sklearn/datasets/_base.py:309

            data.append(Path(filename).read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #288314594872ab16 — Filesystem access.

repo/sklearn/datasets/_base.py:489

    return path.read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #844170bdba3c428a — Filesystem access.

repo/sklearn/datasets/_base.py:1428

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a5bd9729bb3bf3a — Filesystem access.

repo/sklearn/datasets/_lfw.py:441

    with open(index_file_path, "rb") as index_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13847b77fccad889 — Filesystem access.

repo/sklearn/datasets/_svmlight_format_io.py:197

        return open(f, "rb", closefd=False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #508464a66325c145 — Filesystem access.

repo/sklearn/datasets/_svmlight_format_io.py:213

        return open(f, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2965c9bdf146964f — Filesystem access.

repo/sklearn/datasets/_svmlight_format_io.py:590

        with open(f, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79bbf1ccc1977ea5 — Filesystem access.

repo/sklearn/datasets/_twenty_newsgroups.py:96

    with open(cache_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #076ab8ae0a3ad357 — Filesystem access.

repo/sklearn/datasets/_twenty_newsgroups.py:307

            with open(cache_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d86f5f8b7ca210f2 — Filesystem access.

repo/sklearn/feature_extraction/text.py:232

            with open(doc, "rb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14973f763dbdb659 — Filesystem access.

repo/sklearn/tree/_export.py:980

            out_file = open(out_file, "w", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5e1274d4a5c1a87 — Environment-variable access.

repo/sklearn/utils/_array_api.py:181

    if os.environ.get("SCIPY_ARRAY_API") != "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3593f4929e1c921 — Filesystem access.

repo/sklearn/utils/_repr_html/estimator.py:20

    estimator_css = estimator_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f519efe7e95fd34c — Filesystem access.

repo/sklearn/utils/_repr_html/estimator.py:21

    params_css = params_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #753f4d21b45fb687 — Filesystem access.

repo/sklearn/utils/_repr_html/estimator.py:22

    features_css = features_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3c6c5ea6a903587 — Filesystem access.

repo/sklearn/utils/_repr_html/estimator.py:563

        with open(str(Path(__file__).parent / "estimator.js"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10c0c46d0f2985da — Environment-variable access.

repo/sklearn/utils/_testing.py:367

    if int(os.environ.get("SKLEARN_SKIP_NETWORK_TESTS", 0)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97176c42f009b198 — Filesystem access.

repo/sklearn/utils/_testing.py:926

        with open(source_file, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f8e8fd3cae8cdf4 — Environment-variable access.

repo/sklearn/utils/_testing.py:930

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b0f01e674f78a39 — Environment-variable access.

repo/sklearn/utils/_testing.py:937

        coverage_rc = os.environ.get("COVERAGE_PROCESS_START")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09dd14ee791cb809 — Environment-variable access.

repo/sklearn/utils/_testing.py:1334

    if os.environ.get("SCIPY_ARRAY_API") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2b754f7061239f2 — Environment-variable access.

repo/sklearn/utils/_testing.py:1363

        if os.getenv("PYTORCH_ENABLE_MPS_FALLBACK") != "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

rich

python dependency

medium telemetry dependency Excluded from app score #b2e369afee4f52f8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/rich/progress.py:173

        yield from progress.track(
            sequence,
            total=total,
            completed=completed,
            description=description,
            update_period=update_period,
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 22 low-confidence finding(s)

low env_fs dependency Excluded from app score #face0d18823a0353 — Environment-variable access.

pkgs/python/[email protected]/rich/_unicode_data/__init__.py:67

        unicode_version = os.environ.get("UNICODE_VERSION", "latest")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb6e2f6f2a0685da — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:441

        self.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80b811a31e16d33d — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:612

    term.write_text("went back and wrapped to prev line")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8db354dffacc0101 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:615

    term.write_text("we go up")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c93877a49548e1f3 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:618

    term.write_text("and down")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b32345e244c6749 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:623

    term.write_text("we went up and back 2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #add995f7f19c88d0 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:628

    term.write_text("we went down and back 2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3feb580c73c631f1 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:636

    term.write_text("The red arrow shows the cursor location, and direction of erase")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #089d320316523afc — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:646

    term.write_text("The red arrow shows the cursor location, and direction of erase")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc886143364dbe0e — Filesystem access.

pkgs/python/[email protected]/rich/_windows_renderer.py:19

                term.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29c3698ce54c1d44 — Filesystem access.

pkgs/python/[email protected]/rich/_windows_renderer.py:28

                    term.write_text("\r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a25cb0917ec4c949 — Environment-variable access.

pkgs/python/[email protected]/rich/console.py:515

        or os.getenv("DATABRICKS_RUNTIME_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09ab50faf1d6af81 — Environment-variable access.

pkgs/python/[email protected]/rich/console.py:617

    _environ: Mapping[str, str] = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9523e9a8970e78b — Filesystem access.

pkgs/python/[email protected]/rich/console.py:2241

        with open(path, "w", encoding="utf-8") as write_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #871ce43cbc1268e7 — Filesystem access.

pkgs/python/[email protected]/rich/console.py:2349

        with open(path, "w", encoding="utf-8") as write_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8889a5f94960e606 — Filesystem access.

pkgs/python/[email protected]/rich/console.py:2641

        with open(path, "w", encoding="utf-8") as write_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6cceb2d5dd1bcf83 — Environment-variable access.

pkgs/python/[email protected]/rich/diagnose.py:32

    env = {name: os.getenv(name) for name in env_names}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc6a988da9884ede — Filesystem access.

pkgs/python/[email protected]/rich/json.py:134

            json_data = Path(args.path).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f6baa6741272bc4 — Filesystem access.

pkgs/python/[email protected]/rich/markdown.py:777

        with open(args.path, encoding="utf-8") as markdown_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96342f7784103fa0 — Filesystem access.

pkgs/python/[email protected]/rich/progress.py:1373

        handle = io.open(file, "rb", buffering=buffering)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bba655accfda8cd — Filesystem access.

pkgs/python/[email protected]/rich/syntax.py:360

        code = Path(path).read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b25c06d89b92023 — Filesystem access.

pkgs/python/[email protected]/rich/theme.py:73

        with open(path, encoding=encoding) as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

conda-lock

python dependency

expand_more 343 low-confidence finding(s)

low env_fs dependency Excluded from app score #373f8e8e92eee925 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/cleo/application.py:517

        shell_verbosity = int(os.getenv("SHELL_VERBOSITY", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bb8858f520f431d — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/cleo/color.py:127

        if os.getenv("COLORTERM") != "truecolor":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76940cccdfb42121 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/cleo/commands/completions_command.py:336

        shell = os.getenv("SHELL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0cd66bb6dcc9cf2 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/cleo/io/outputs/stream_output.py:83

        if "NO_COLOR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1ed6c21727e93d7 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/cleo/io/outputs/stream_output.py:86

        if os.getenv("TERM_PROGRAM") == "Hyper":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20552321d2e99237 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/cleo/io/outputs/stream_output.py:91

                os.getenv("ANSICON") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96243b46e5029eb6 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/cleo/io/outputs/stream_output.py:92

                or os.getenv("ConEmuANSI") == "ON"  # noqa: SIM112

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa51dc10a6949f0d — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/cleo/io/outputs/stream_output.py:93

                or os.getenv("TERM") == "xterm"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0b0eede28100de5 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/cleo/terminal.py:44

        columns = os.environ.get("COLUMNS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bbf41ae71d54ce8 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/cleo/terminal.py:47

        lines = os.environ.get("LINES")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d649c9c57587bdd — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/__init__.py:56

if os.getenv("CONDA_ROOT") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9ca059cc0e5a80b — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/__init__.py:57

    os.environ["CONDA_ROOT"] = sys.prefix

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8c28f0b0f4738d5 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/_vendor/appdirs.py:77

            os.getenv('XDG_CONFIG_HOME', os.path.expanduser("~/.config")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #107f854d35f87103 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/_vendor/appdirs.py:168

            os.getenv('XDG_CACHE_HOME', os.path.expanduser('~/.cache')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9619222d78cca582 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/_vendor/cpuinfo/cpuinfo.py:55

			self._output = open('cpuinfo_trace_{0}.trace'.format(date), 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2c2d3b55179520d — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/_vendor/cpuinfo/cpuinfo.py:306

	exts = filter(None, os.environ.get('PATHEXT', '').split(os.pathsep))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3a05c8f73933b04 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/_vendor/cpuinfo/cpuinfo.py:307

	for p in os.environ['PATH'].split(os.pathsep):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cedc880880233731 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/_vendor/distro.py:46

_UNIXCONFDIR = os.environ.get('UNIXCONFDIR', '/etc')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07c8e628be5f269c — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/_vendor/distro.py:848

            with open(self.os_release_file) as release_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b12cb42b1794b402 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/_vendor/distro.py:922

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a022043ffdacacee — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/_vendor/distro.py:1043

            with open(filepath) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #818ea3023077b8c5 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:213

            builder.append(self.hook_source_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d661e81539a1b728 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:390

        old_conda_shlvl = int(os.getenv("CONDA_SHLVL", "").strip() or 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #891aa0c0f021d2a9 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:391

        old_conda_prefix = os.getenv("CONDA_PREFIX")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e612304b3e160f1b — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:408

        clobber_vars = set(env_vars).intersection(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b0a34295171f3ed — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:412

            if os.getenv(clobber_var) != env_vars[clobber_var]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d1db6739cc25c31 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:421

            env_vars[f"__CONDA_SHLVL_{old_conda_shlvl}_{name}"] = os.getenv(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e43f1aa14b2d5fb — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:478

        old_conda_prefix = os.getenv("CONDA_PREFIX")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81f07e10631a6cd4 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:479

        old_conda_shlvl = int(os.getenv("CONDA_SHLVL", "").strip() or 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f53ef5f821d99c32 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:520

            new_prefix = os.getenv("CONDA_PREFIX_%d" % new_conda_shlvl)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77f3cdef96419d6c — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:525

            old_prefix_stacked = "CONDA_STACKED_%d" % old_conda_shlvl in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d68659cf711f05b — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:558

            if save_value := os.getenv(save_var):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2a17713a936d8b4 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:571

        conda_prefix = os.getenv("CONDA_PREFIX")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f8136ce2ad08b15 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:572

        conda_shlvl = int(os.getenv("CONDA_SHLVL", "").strip() or 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eecd69e8720eec9b — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:582

        conda_default_env = os.getenv(
            "CONDA_DEFAULT_ENV", self._default_env(conda_prefix)
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43bc78ce1043e296 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:630

        path = os.getenv(
            "PATH",
            clean_paths[sys.platform] if sys.platform in clean_paths else "/usr/bin",
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efcc4154697873c7 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:692

        old_conda_shlvl = int(os.getenv("CONDA_SHLVL", "").strip() or 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e0a5d6c2d5ebbac — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:762

            old_shlvl = int(os.getenv("CONDA_SHLVL", "0").rstrip())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51a0eeb8aeeca4aa — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:765

                    env_i = self._default_env(os.getenv("CONDA_PREFIX", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b898c771ca2082e — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:768

                        os.getenv(f"CONDA_PREFIX_{i}", "").rstrip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63f2114e8142dead — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:770

                stacked_i = bool(os.getenv(f"CONDA_STACKED_{i}", "").rstrip())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a1ecca637c41cf3 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:782

                stacked = bool(os.getenv(f"CONDA_STACKED_{old_shlvl}", "").rstrip())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09f843dd5e621653 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:842

                with open(pkg_env_var_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #473b1cca636aed93 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:847

            with open(env_vars_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19b88fc6e550c7ff — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:1145

        ps1 = os.getenv("PS1", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84ba60cfadd8170c — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:1149

        current_prompt_modifier = os.getenv("CONDA_PROMPT_MODIFIER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #357c2e2df7439646 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:1198

        prompt = os.getenv("prompt", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba671323146c7da6 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/activate.py:1199

        current_prompt_modifier = os.getenv("CONDA_PROMPT_MODIFIER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9dba5bd7ef374e5a — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/auxlib/compat.py:37

    if "CONDA_TEST_SAVE_TEMPS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c25cc6bdf1c37b9 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:695

                fh = open(path, "a+")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04eba9c5fdff3bac — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:742

        _default_env = os.getenv("CONDA_DEFAULT_ENV")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d32d8145e913aa50 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:756

        return os.getenv("CONDA_PREFIX")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95683e4f45c90703 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:760

        return int(os.getenv("CONDA_SHLVL", -1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a133878ce92b07db — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:821

                    (CONDA_SOURCE_ROOT, os.environ.get("PYTHONPATH", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #217bfd2f7f32db33 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:1930

        old_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42cfa31b77295de0 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:1931

        os.environ.update(env or {})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc0ca598dd874f65 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:1932

        os.environ.update(kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bb871c44d3a6e5c — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:1935

        os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7f0b9121bdfe066 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:1936

        os.environ.update(old_env)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70f22736040a94dd — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/base/context.py:2151

                open(envs_dir_magic_file, "a").close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #344e6e114a65e51b — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/common.py:166

            for line in open(path):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c555b3703d903baa — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/conda_argparse.py:191

        return _exec([executable, *args._args], os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17e3ac452a69e12f — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/find_commands.py:32

    dir_paths.extend(os.environ.get("PATH", "").split(os.pathsep))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5024cda0ba4cfeb — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/find_commands.py:62

    dir_paths.extend(os.environ.get("PATH", "").split(os.pathsep))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01914906b1b4d183 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_config.py:462

        return yaml_round_trip_load(Path(path).read_text()) or {}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #260cfe8b6ce78613 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_config.py:507

        Path(path).write_text(yaml_round_trip_dump(config))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9442f764318451b0 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_config.py:677

            with open(rc_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55aa164d6c2182c1 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_config.py:687

        with open(rc_path, "w") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #769c8e901bc9845e — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_config.py:693

        with open(rc_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c8adf6079b0fbcd — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_config.py:698

        with open(sys_rc_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb85f7caa3d8c9cb — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_env_update.py:100

            name = os.environ.get("CONDA_DEFAULT_ENV", False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43a6b4454ebe304c — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_export.py:128

        fp = open(args.file, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed7c75c5021e424f — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_info.py:117

            if "APPDATA" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40cfde8e792425cb — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_info.py:119

            APPDATA = os.environ["APPDATA"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f65192de0acc8bb — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_info.py:230

    netrc_file = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9240e1601f5a994 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_info.py:293

    env_var_keys.update(v for v in os.environ if v.upper().startswith("CONDA"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d3bbda4cd20cb8e — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_info.py:294

    env_var_keys.update(v for v in os.environ if v.upper().startswith("PYTHON"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3099639b780bd5fa — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_info.py:295

    env_var_keys.update(v for v in os.environ if v.upper().endswith("PATH"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db0babd6f0c8d0eb — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_info.py:296

    env_var_keys.update(v for v in os.environ if v.upper().startswith("SUDO"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #001f454f6ce36748 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_info.py:299

        ev: os.getenv(ev, os.getenv(ev.lower(), "<not set>")) for ev in env_var_keys

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6e9227b05946bb2 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_info.py:302

    proxy_keys = (v for v in os.environ if v.upper().endswith("PROXY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bb2cd2b8a90bca2 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_package.py:158

    if open(path, "rb").read(2) != "#!":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e71f73e91b46b54 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_package.py:161

    with open(path) as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d19cd32af96265e — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_package.py:169

    with open(tmp_path, "w") as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f2588b521fbbf44 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_package.py:180

    with open(join(info_dir, "files"), "w") as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db455ed76573a237 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_package.py:184

    with open(join(info_dir, "index.json"), "w") as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb3e43f825258be7 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_package.py:188

        with open(join(info_dir, "has_prefix"), "w") as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37d76d79d7be52f0 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_package.py:224

            h.update(open(path, "rb").read())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9666c2cae6a18a20 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_pip.py:27

    os.environ["CONDA_PIP_UNINITIALIZED"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd4e1ea97be4fadc — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_run.py:109

        env=encode_environment(os.environ.copy()),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08aca2a7cecfef29 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/cli/main_run.py:130

    if "CONDA_TEST_SAVE_TEMPS" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e01255c807b1bbbb — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/configuration.py:260

            for k, v in environ.items()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1788e39bff4b89e9 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/configuration.py:396

        with open(filepath) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72be4e37eb8bf5a9 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/configuration.py:1393

                template = custom_expandvars(search, environ, **kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b3a182edf05c1dd — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/decorators.py:24

            value = os.environ.get(envvar_name, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17caa8cf123b4ad3 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/io.py:60

if boolify(os.environ.get("CONDA_TIMED_LOGGING")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db5947c19ee6ce22 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/io.py:129

        saved_vars[name] = os.environ.get(name, NULL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec57db48704b0457 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/io.py:130

        os.environ[name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #413f1b5455d3d240 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/io.py:140

                del os.environ[name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a15fc96332ce58d — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/io.py:142

                os.environ[name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19b186b992eb5a46 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/io.py:644

        os.environ.get("CONDA_INSTRUMENTATION_RECORD_FILE", default_record_file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42cb2357436892af — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/io.py:673

        enabled = os.environ.get("CONDA_INSTRUMENTATION_ENABLED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fb880a07a486e09 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/io.py:686

            with open(self.record_file, "a") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19d500fddc62acb4 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/io.py:694

        enabled = os.environ.get("CONDA_INSTRUMENTATION_ENABLED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #847ce46ab534f46d — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/io.py:721

    with open(record_file) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #938c494a9126adc3 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/path.py:337

        cygpath = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #971fb226ceb5d3a3 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/path.py:337

        cygpath = os.environ.get(
            "CYGPATH", os.path.join(os.path.dirname(bash), "cygpath.exe")
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1402662678db43ec — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/path.py:341

        cygpath = os.environ.get("CYGPATH", "cygpath.exe")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90584868edda027e — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/pkg_formats/python.py:213

                with open(fpath) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9ea13ba1234f673 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/pkg_formats/python.py:281

            with open(manifest_full_path) as csvfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b203b996bd1f634 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/pkg_formats/python.py:380

                with open(fpath) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86f5a2b8b27a7d0c — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/pkg_formats/python.py:611

            with open(fpath) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11779155f03226e1 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/pkg_formats/python.py:941

        with open(egg_link_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be164977e6faff58 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/common/pkg_formats/python.py:949

        with open(egg_link_path, encoding=getpreferredencoding()) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39baeb5b6bee08cd — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/envs_manager.py:82

        with open(user_environments_txt_file, "a") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #655896f28b7b9aa8 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/envs_manager.py:222

        with open(environments_txt_file, "w") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bbcbd2086cc4584 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:128

    if os.getenv("CONDA_PIP_UNINITIALIZED") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bde0ec838eae1d5 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:232

            with open("dev-init.bat", "w") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c6bd95df7dc4f0c — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:585

            if "ZDOTDIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b173a4464122e14 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:847

                with open(temp_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccb86b1ddbcddd5e — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:879

    with open(temp_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #370476975ef01961 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:882

    with open(temp_path, "w+b") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13b93ce915e0b305 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:915

        with open(conda_ep_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f27fd2ba9f40225 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:962

            with open(conda_ep_path, "w") as fdst:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f42675199937cfab — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:993

    target = join(os.environ["HOMEPATH"], "Desktop", "Anaconda Prompt.lnk")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a20fb09a260521b — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1025

        with open(target_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f640b36255f50416 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1039

            with open(target_path, "w") as fdst:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16120cf2fb2f6360 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1055

    with open(src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76ee4ddf63acff72 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1063

    with open(src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #815cb3a23dbc8b3b — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1071

    with open(src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b440d8d37be02d8 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1080

    with open(src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e0733d8c4f8b5f3 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1089

    with open(src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bea15ed84075275 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1097

    with open(conda_bat_src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f61e091b70d81f3 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1107

    with open(conda_bat_src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f21c584c8a31510 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1117

    with open(conda_bat_src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25771c516483960c — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1125

    with open(conda_bat_src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d91939f77e1d736 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1135

    with open(conda_bat_src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a69a44420922c847 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1143

    with open(conda_bat_src_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca8771aaaf15190f — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1157

    with open(conda_psm1_path) as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1339a965f90ca27a — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1214

        with open(user_rc_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b18eead8628e6c39 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1287

            with open(user_rc_path, "w") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7519a9819ce71fb — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1326

        with open(user_rc_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69d758fceeb400af — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1376

            with open(user_rc_path, "w") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95e744bde9febbb1 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1453

        with open(user_rc_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac1d4b771e5741d2 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1539

            with open(user_rc_path, "w") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc0823ea5a46669b — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1551

        with open(conda_sh_system_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b4b0c07d4b6bc68 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1570

                with open(conda_sh_system_path, "w") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #973d83801399a80f — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1740

        with open(profile_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c6322536ca7bdc6 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1781

            with open(profile_path, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37b644f42769b96d — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1827

        with open(target_path, "rb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4dd85d6ddc69f6d6 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1841

            with open(target_path, "wb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #782641fd45baa929 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1853

        with open(target_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d22ee400dca29a9 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1878

        with open(target_path, "wb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ac4b1242a758793 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1887

        with open(target_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d999b48d3ad7a24f — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/initialize.py:1915

        with open(target_path, "w") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad076e093fc923b9 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/link.py:341

                    print(indent(msg_file.read_text(), "  "))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ff1cd435829b9e5 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/link.py:789

                open(test_path, "a").close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #976726fb93aa6339 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/link.py:1479

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc2cd18110f06d8a — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/link.py:1485

            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51e89879401cac0b — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/link.py:1602

            if "CONDA_TEST_SAVE_TEMPS" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06d6e9403856fb44 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/link.py:1614

            with open(path) as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c7081675a7d61ca — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/package_cache_data.py:540

            with open(urls_txt_path, "rb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9f523250b0c635a — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/portability.py:294

    if os.environ.get("CONDA_BUILD") == "1" and "/_h_env_placehold" in executable:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53a0f51dc02dab77 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/prefix_data.py:209

        with open(prefix_record_json_path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a09364f78e322d1e — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/prefix_data.py:374

            with open(env_vars_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ef552126ae6ccc8 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/prefix_data.py:382

        env_vars_file.write_text(
            json.dumps(state, ensure_ascii=False, default=lambda x: x.__dict__)
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cbef5a7811c99d1a — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/solve.py:1403

        with open(pinfile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de53bbccfb1b326f — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/subdir_data.py:332

            with open(self.cache_path_pickle, "wb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32e77248aa7f6111 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/core/subdir_data.py:384

            with open(self.cache_path_pickle, "rb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #76d2d3e6e28b8163 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/conda/exception_handler.py:322

            response = requests.post(
                url, headers=headers, timeout=_timeout, data=data, allow_redirects=False
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #79330aa504444a04 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/conda/exception_handler.py:330

                response = requests.post(
                    url,
                    headers=headers,
                    timeout=_timeout,
                    data=data,
                    allow_redirects=False,
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #4ab95ff7cb5718c0 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/exports.py:289

            with open(dst + ".bat", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f462e2e54bbbb9df — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/exports.py:301

            with open(dst, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2e0a9a19637a989 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/anaconda_client.py:53

    if "BINSTAR_CONFIG_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #936da1a9452a94bc — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/anaconda_client.py:54

        return os.path.join(os.environ["BINSTAR_CONFIG_DIR"], "data")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a171dd90212fa375 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/anaconda_client.py:69

        with open(tkn_entry.path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e39cd4c2c9f72f2 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/anaconda_client.py:84

    with open(tokenfile, "w") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d680038cffd744f2 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/connection/adapters/localfs.py:54

            resp.raw = open(pathname, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #a69d6aee0f8b9900 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/connection/download.py:97

        resp = session.get(
            url, stream=True, headers=headers, proxies=session.proxies, timeout=timeout
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #df2480074b89129c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/connection/download.py:321

        response = session.get(
            url, stream=True, proxies=session.proxies, timeout=timeout
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #68ab04518ead6227 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/create.py:175

    with open(target_full_path, "w") as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e1882152620904b — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/create.py:313

    with open(dst, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e17d89fa28b7cac4 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/create.py:339

    with open(src, "rb") as fsrc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8771dc445c78166 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/create.py:340

        with open(dst, "wb") as fdst:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f49a2354756cd087 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/delete.py:73

                with open(name) as contents:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a973f5335f2adb6d — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/delete.py:76

                comspec = environ["COMSPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b289fab8f0a2703 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/read.py:58

        with open(path) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28fd3a622c35828f — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/read.py:108

    with open(join(extracted_package_directory, "info", "index.json")) as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d1323ef8fe11e9c — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/read.py:117

        with open(join(tmpdir, "info", "index.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9bbbbaed1299f76 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/read.py:123

    with open(join(extracted_package_directory, "info", "repodata_record.json")) as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c71f88ef6be388a9 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/read.py:130

        with open(icon_file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #adb39210091a84e1 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/read.py:146

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0430fbab800cd767 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/read.py:166

        with open(paths_json_path) as paths_json:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e43fd6fa1b88c149 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/test.py:28

            fh = open(path, "a+")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #961f1a1e0d6b0ccd — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/disk/update.py:159

            with open(path, "a"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #4230d84ec1a7232c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/repodata/__init__.py:164

            response: Response = session.get(
                url, headers=headers, proxies=session.proxies, timeout=timeout
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #81384a209320f6a2 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/repodata/__init__.py:542

                json_data = self.cache_path_json.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d9c8edc05f3df97 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/repodata/__init__.py:873

                    raw_repodata = self.cache_path_json.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #67c08d5624771568 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/repodata/jlap/fetch.py:128

    response = session.get(url, stream=True, headers=headers, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f9524725aa37c73d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/repodata/jlap/fetch.py:243

    response = session.get(url, stream=True, timeout=timeout, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #101230b4aa7615e4 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/subprocess.py:64

        if "CONDA_TEST_SAVE_TEMPS" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6574c77eb6fac806 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/subprocess.py:88

    env = encode_environment(env or os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #275c8ef205244705 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/gateways/subprocess.py:159

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52ab5864f3597be4 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/history.py:134

        with open(self.path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7723f7acf8fed78 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/misc.py:222

        with open(join(prefix, ".nonadmin"), "w") as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61314496c7bd16b4 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/misc.py:324

            with open(src, "rb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62bddd018afe9aba — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/misc.py:336

        with open(dst, "wb") as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #905ca8b023498be5 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/notices/cache.py:92

        with open(cache_file, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7d14e459679a665 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/notices/cache.py:105

        with open(cache_key) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdfcbdbf10714f80 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/notices/cache.py:121

    with open(cache_key, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8c05cc979a25c5e — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/notices/cache.py:131

    with open(cache_file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca0bac812140e581 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/notices/cache.py:138

    with open(cache_file, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6e5918fac12681b — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/notices/cache.py:148

    with open(cache_file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #f1e737a1813534b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/conda/notices/fetch.py:66

        resp = session.get(
            url, allow_redirects=False, timeout=5
        )  # timeout: connect, read

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5c3927db69b64af3 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/plugins/subcommands/doctor/health_checks.py:47

        for line in envs_txt_file.read_text().splitlines():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cff554bf877224ff — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/plugins/subcommands/doctor/health_checks.py:69

        for file_name in json.loads(file.read_text()).get("files", []):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e56aa9da0f7fb459 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/plugins/subcommands/doctor/health_checks.py:86

            metadata = json.loads(file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8274066458fe902 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/plugins/virtual_packages/archspec.py:15

    archspec_name = os.getenv("CONDA_OVERRIDE_ARCHSPEC", archspec_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54a5628c091995b3 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/plugins/virtual_packages/cuda.py:29

    if "CONDA_OVERRIDE_CUDA" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4c7d48ea7323d3f — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/plugins/virtual_packages/cuda.py:30

        return os.environ["CONDA_OVERRIDE_CUDA"].strip() or None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #adc12714e81ad123 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/plugins/virtual_packages/cuda.py:129

    os.environ.pop("CUDA_VISIBLE_DEVICES", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91b7b49e6ab9cd2f — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/plugins/virtual_packages/linux.py:27

    dist_version = os.environ.get("CONDA_OVERRIDE_LINUX", dist_version)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1a1ec87492d6e8c — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/plugins/virtual_packages/linux.py:35

    libc_version = os.getenv(f"CONDA_OVERRIDE_{libc_family.upper()}", libc_version)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c909330769efb903 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/plugins/virtual_packages/osx.py:19

    dist_version = os.environ.get("CONDA_OVERRIDE_OSX", dist_version)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5587945aeb2355c9 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:65

    if "CONDA_PYTHON_EXE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db3fc5063e9ee70a — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:67

            Path(os.environ["CONDA_PYTHON_EXE"]).resolve()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74997a90a3e4d18a — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:74

                f"- CONDA_PYTHON_EXE={os.environ['CONDA_PYTHON_EXE']}\n"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2162e699b34752f3 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:84

    if "CONDA_PREFIX" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8231929eb192e7d0 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:106

        p = activator._remove_prefix_from_path(os.environ["CONDA_PREFIX"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b041751bdd6fb23d — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:124

        os.environ["PATH"] = os.pathsep.join(new_p)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54a9f75d70ab4d51 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:126

        p = activator._add_prefix_to_path(os.environ["CONDA_PREFIX"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71a16c620509119a — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:127

        os.environ["PATH"] = os.pathsep.join(p)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #617bf7bf2e90bc46 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:291

        (subdir / "repodata.json").write_text(json.dumps(repodata, cls=EntityEncoder))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87da2985646a397f — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:292

        (noarch / "repodata.json").write_text(json.dumps({}, cls=EntityEncoder))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b469d87a42cc2dfa — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/__init__.py:318

        if obj is os.environ and name.startswith("CONDA_")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90d742c1c664b25a — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/fixtures.py:100

    params=os.environ.get("CONDA_TEST_SOLVERS", "libmamba,classic").split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b55e4a53d88b77c — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/helpers.py:31

TEST_DATA_DIR = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58f6601d187eaf77 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/helpers.py:31

TEST_DATA_DIR = os.environ.get(
    "CONDA_TEST_DATA_DIR", abspath(join(dirname(__file__), "..", "..", "tests", "data"))
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6684ed5f498d4ba9 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/helpers.py:78

    old_prefix = os.environ["CONDA_PREFIX"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82442c238b52bd75 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/helpers.py:81

        os.environ["CONDA_PREFIX"] = prefix

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #841973052b4a6a3e — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/helpers.py:84

        os.environ["CONDA_PREFIX"] = old_prefix

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f45fd3516df128d — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/helpers.py:225

    with open(subdir_path / "repodata.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0c0d1562fc61b32 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/helpers.py:276

        with open(join(TEST_DATA_DIR, json_filename_or_packages)) as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ca1fd8479491d5b — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/integration.py:144

    tmpdir_name = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1830b7c7420db6f — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/integration.py:144

    tmpdir_name = os.environ.get(
        "CONDA_TEST_TMPDIR_NAME",
        (str(uuid4())[:4] + SPACER_CHARACTER + random_unicode)
        if name is None
        else name,
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbd43d0c1af9c0d0 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/integration.py:340

            if "CONDA_TEST_SAVE_TEMPS" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0caae43799729cc6 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/integration.py:407

        with open(join(subchan, "repodata.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5ee18d42c0b1e68 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/integration.py:409

        with open(join(noarch_dir, "repodata.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7747284f204c3a20 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/integration.py:492

            return join(os.environ["HOME"], "Applications")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a041e1219bb4601f — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/integration.py:496

            return join(os.environ["HOME"], ".local", "share", "applications")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d337110f2913e61c — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/solver_helpers.py:140

            record_path.write_text(json.dumps(record_data))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08d2d7cd57f2d737 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/solver_helpers.py:143

        history_path.write_text(
            "\n".join(
                (
                    "==> 2000-01-01 00:00:00 <==",
                    *map(package_string, self.installed_packages),
                )
            )
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1582a170d1e1d3c4 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/testing/solver_helpers.py:163

            subdir_path.joinpath("repodata.json").write_text(
                json.dumps(
                    {
                        "info": {
                            "subdir": subdir,
                        },
                        "packages": package_data.get(subdir, {}),
                    }
                )
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #185927480bfcac13 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/conda/trust/signature_verification.py:228

            resp = session.get(
                join_url(signing_data_url, filename),
                headers=headers,
                proxies=session.proxies,
                auth=None,
                timeout=(
                    context.remote_connect_timeout_secs,
                    context.remote_read_timeout_secs,
                ),
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #d854806458e81705 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/utils.py:406

            conda_bat = environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8aa93c7754164843 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/utils.py:406

            conda_bat = environ.get(
                "CONDA_BAT", abspath(join(root_prefix, "condabin", "conda.bat"))
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e2ddff6bb7c50ab — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/utils.py:475

                environ.get("CONDA_EXE", abspath(join(root_prefix, "bin", "conda")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5e189ea78fac4e0 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/utils.py:516

    if basename(environ.get("COMSPEC", "")).lower() != "cmd.exe":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b36b77808fae7fb5 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/utils.py:519

            environ.get("SystemRoot")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e31525d513cdd68b — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/utils.py:520

            and join(environ["SystemRoot"], "System32", "cmd.exe"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #722c0986a7cf7c94 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/utils.py:522

            environ.get("windir") and join(environ["windir"], "System32", "cmd.exe"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b74dc167a72434bf — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/utils.py:525

                environ["COMSPEC"] = comspec

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0d1b22d5d01cb8b — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/conda/utils.py:533

    return environ["COMSPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7616206ec8d5f05 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/config/config.py:202

        for env_key in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28b7a198353889d8 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/config/config.py:206

                    "url": os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f518e1a92693d8a — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/config/config.py:258

            env_value = os.getenv(env)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #963f8313c01421aa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/_vendor/fastjsonschema/ref_resolver.py:63

        req = urlopen(uri)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #00e2398ba7618472 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/_vendor/lark/lark.py:576

        with open(grammar_filename, encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #787ffb78d84a463b — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/_vendor/lark/load_grammar.py:1317

                    with open(joined_path, encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ec6aa8012b138b3 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/_vendor/lark/load_grammar.py:1338

            open(grammar_path, encoding='utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f825d3eabb0bc83 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/_vendor/lark/load_grammar.py:1393

            with open(path, encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d77ecac5d9d8fa8b — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/_vendor/lark/tools/standalone.py:144

        with open(os.path.join(_larkdir, pyfile)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fc236fea18c3948 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/_vendor/lark/utils.py:246

            return open(name, mode, **kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61c3aad515e4ca09 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/_vendor/packaging/_manylinux.py:24

        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80197ad15e687126 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/_vendor/packaging/_musllinux.py:46

        with open(executable, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af10c07ee15fee5e — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/factory.py:187

                    raw_license = (root / license_file).read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #540e01572b9a631f — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/masonry/builders/sdist.py:425

        if source_date_epoch := os.getenv("SOURCE_DATE_EPOCH"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96032a60d3486948 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/masonry/builders/wheel.py:507

            _env_date = time.gmtime(int(os.environ["SOURCE_DATE_EPOCH"]))[:6]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df2eaa5e1af8343f — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/masonry/metadata.py:63

                    descriptions.append(readme.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #eb71ae07fbcfe1ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/core/spdx/updater.py:29

        with urlopen(url) as r:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #00536323954a5d72 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/inspection/info.py:252

            text = requires.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #b1908fd262d4be4e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/inspection/lazy_wheel.py:432

        response = self._session.get(self._url, headers=headers, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #96f537051dbb9a1f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/inspection/lazy_wheel.py:608

        tail = self._session.get(self._url, headers=headers, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #61bbd8f9057b8f3a — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/installation/executor.py:824

                url.write_text(json.dumps(url_reference), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8328a1e982c8aef — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/json/__init__.py:19

    schema = json.loads(schema_file.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0ae58e9a58e1ed7 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/json/__init__.py:30

        (CORE_SCHEMA_DIR / "poetry-schema.json").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd16930153656c53 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/locations.py:16

    os.getenv("POETRY_CONFIG_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cc6a84790b7520c — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/locations.py:22

    if poetry_home := os.getenv("POETRY_HOME"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fcabc2fed7e453e — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/masonry/builders/editable.py:127

            pth_file = self._env.site_packages.write_text(
                pth_file, content, encoding=getencoding()
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fd16c1ae019fcfd — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/masonry/builders/editable.py:249

        direct_url_json.write_text(
            json.dumps(
                {
                    "dir_info": {"editable": True},
                    "url": self._poetry.file.path.parent.absolute().as_uri(),
                }
            ),
            encoding="utf-8",
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #288c8a7fae64b9f4 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/packages/locker.py:247

            with open(self.lock, encoding="utf-8", newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce9262c13e8fbe29 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/packages/locker.py:257

            with open(self.lock, "w", encoding="utf-8", newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f603b7c52ba22a4 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/plugins/plugin_manager.py:313

        self._gitignore_file.write_text("*", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #f292b30d88dc32b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/repositories/http_repository.py:128

        if self._lazy_wheel and self._supports_range_requests.get(netloc, True):

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #604bfbf0493a5dec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/repositories/http_repository.py:173

                response = self.session.get(link.metadata_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b9a9ee248af931b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/repositories/http_repository.py:406

            response: requests.Response = self.session.get(
                url, raise_for_status=False, timeout=REQUESTS_TIMEOUT
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #58e21b8ce31c3ee9 — Filesystem access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/repositories/installed_repository.py:197

            path.joinpath("direct_url.json").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #951c27f873de70f0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/repositories/pypi_repository.py:61

        response = requests.get(
            self._base_url + "search", params={"q": query}, timeout=REQUESTS_TIMEOUT
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d7388b809436d119 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/repositories/pypi_repository.py:200

            json_response = self.session.get(
                self._base_url + endpoint,
                raise_for_status=False,
                timeout=REQUESTS_TIMEOUT,
                headers=headers,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5bf210e500af8677 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/repositories/pypi_repository.py:210

            json_response = self.session.get(
                self._base_url + endpoint,
                raise_for_status=False,
                timeout=REQUESTS_TIMEOUT,
                headers=headers,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #86b542a3b676cc5f — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/utils/constants.py:7

REQUESTS_TIMEOUT = int(os.getenv("POETRY_REQUESTS_TIMEOUT", 15))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #42f8b2e51e1d2afc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/utils/helpers.py:200

        response = self._session.get(
            self._url, stream=True, headers=headers, timeout=REQUESTS_TIMEOUT
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #e3ffec76a12d87b0 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/utils/isolated_build.py:104

        path = os.environ.get("PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7785f5a98e371172 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/_vendor/poetry/vcs/git/system.py:41

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7967afa61435f103 — Filesystem access.

pkgs/python/[email protected]/conda_lock/common.py:45

    with open(filepath) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4a0f92743217892 — Filesystem access.

pkgs/python/[email protected]/conda_lock/common.py:50

    with open(filepath, mode="w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f284f16969c5bb5b — Filesystem access.

pkgs/python/[email protected]/conda_lock/common.py:70

    with open(filepath) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #422a3d06998bd42f — Filesystem access.

pkgs/python/[email protected]/conda_lock/conda_lock.py:215

        with open(file) as explicit_env:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bc52c0da8594928 — Filesystem access.

pkgs/python/[email protected]/conda_lock/conda_lock.py:536

                with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8caac8ee9969f595 — Filesystem access.

pkgs/python/[email protected]/conda_lock/conda_lock.py:555

            with open(filename, "w") as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #122b35444629a06e — Environment-variable access.

pkgs/python/[email protected]/conda_lock/conda_lock.py:1041

    existing_env_vars = {k for k, v in os.environ.items() if v}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #427848ef7f0bf645 — Filesystem access.

pkgs/python/[email protected]/conda_lock/conda_lock.py:1062

    content = path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #928d9d8a83bb1ed8 — Filesystem access.

pkgs/python/[email protected]/conda_lock/conda_solver.py:229

                with open(record) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7be2e70834d1bad7 — Filesystem access.

pkgs/python/[email protected]/conda_lock/conda_solver.py:489

                with open(pinned_filename, "w") as pinned:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b274269a1fece95 — Filesystem access.

pkgs/python/[email protected]/conda_lock/conda_solver.py:619

            with open(conda_meta / (truncated_path.name + ".json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bbeb995cb44a6d1 — Filesystem access.

pkgs/python/[email protected]/conda_lock/conda_solver.py:642

    fake_python_script.write_text(
        dedent(
            """\
            import sys
            import shlex

            cmd = shlex.join(sys.argv)

            stderr_message = f'''\
            This is a fake python binary generated by conda-lock.

            It prevents libmamba from failing when it tries to check for installed \
            pip packages.

            For more details, see the docstring for `make_fake_python_binary`.

            This was called as:
                {cmd}
            '''

            print(stderr_message, file=sys.stderr, flush=True, end='')

            if "-m pip" in cmd:
                # Simulate an empty `pip inspect` output
                print('{}', flush=True)
            else:
                raise RuntimeError("Expected to invoke pip module with `-m pip`.")
            """
        )
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed4298fe0bec22a9 — Filesystem access.

pkgs/python/[email protected]/conda_lock/conda_solver.py:687

        wrapper_batch.write_text(wrapper_batch_content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52494b0468e38335 — Filesystem access.

pkgs/python/[email protected]/conda_lock/conda_solver.py:696

        fake_python_binary.write_text(shell_script_content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2be63ec8d756643a — Environment-variable access.

pkgs/python/[email protected]/conda_lock/invoke_conda.py:107

    conda_flags = os.environ.get("CONDA_FLAGS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44f6d769b3c13cf3 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/invoke_conda.py:234

    override_level = os.environ.get("CONDA_LOCK_SUBPROCESS_STDERR_LOG_LEVEL_OVERRIDE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42fa7e9aab7b2012 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/invoke_conda.py:246

        os.environ.get("CONDA_LOCK_SUBPROCESS_STDERR_DEFAULT_LOG_LEVEL", "ERROR"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd54209ed5c4ad0f — Environment-variable access.

pkgs/python/[email protected]/conda_lock/invoke_conda.py:269

    env = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1e3a632e90ee7df — Environment-variable access.

pkgs/python/[email protected]/conda_lock/invoke_conda.py:283

    conda_flags = os.environ.get("CONDA_FLAGS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37b01122c33c53c1 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/invoke_conda.py:318

        os.environ["MAMBA_ROOT_PREFIX"] = MAMBA_ROOT_PREFIX

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1618b1c3562b9d8 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/invoke_conda.py:330

    if "CONDA_PKGS_DIRS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d8f9b0ff8defcb5 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/invoke_conda.py:331

        del os.environ["CONDA_PKGS_DIRS"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59393199b1ce35b8 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/invoke_conda.py:332

    if "MAMBA_ROOT_PREFIX" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b4eedc1117dc290 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/invoke_conda.py:333

        del os.environ["MAMBA_ROOT_PREFIX"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0a8eb0e2681a92a — Filesystem access.

pkgs/python/[email protected]/conda_lock/lookup.py:37

        content = Path(path).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #30965ab80de43626 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/lookup_cache.py:33

    res = requests.get(url, headers={"User-Agent": "conda-lock"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #e27425b6d98d95f7 — Filesystem access.

pkgs/python/[email protected]/conda_lock/lookup_cache.py:105

            return destination.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e84d65865a37396 — Filesystem access.

pkgs/python/[email protected]/conda_lock/lookup_cache.py:110

            old_etag = destination_etag.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #ea32ee678d069979 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/conda_lock/lookup_cache.py:114

    res = requests.get(url, headers=request_headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #01ccf95a9c2c37f9 — Filesystem access.

pkgs/python/[email protected]/conda_lock/lookup_cache.py:121

            destination_etag.write_text(res.headers["ETag"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca012fab131347f9 — Filesystem access.

pkgs/python/[email protected]/conda_lock/lookup_cache.py:125

    return destination.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b97cf5ec6725532 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/models/channel.py:205

        candidates = {v: k for k, v in os.environ.items() if k.upper().endswith(suffix)}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eef9a37f6f6c59df — Filesystem access.

pkgs/python/[email protected]/conda_lock/virtual_package.py:127

        (self.base_path / subdir / "repodata.json").write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6aa1106d38dc32de — Environment-variable access.

pkgs/python/[email protected]/conda_lock/virtual_package.py:154

            self.old_env_vars[e] = os.environ.get(e)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d451ee9054d628af — Environment-variable access.

pkgs/python/[email protected]/conda_lock/virtual_package.py:155

            os.environ[e] = ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d0fc3277946a8f9 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/virtual_package.py:166

                del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7593e593ccc5d04c — Environment-variable access.

pkgs/python/[email protected]/conda_lock/virtual_package.py:168

                os.environ[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ede315e9cc87c01 — Environment-variable access.

pkgs/python/[email protected]/conda_lock/virtual_package.py:176

    runner_tmp = os.environ.get("RUNNER_TEMP")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fc1c4fdf88adf93 — Filesystem access.

pkgs/python/[email protected]/conda_lock/virtual_package.py:310

    print((rd.base_path / "linux-64" / "repodata.json").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

cython

python dependency

expand_more 155 low-confidence finding(s)

low env_fs dependency Excluded from app score #1cfcfa6c583acae3 — Environment-variable access.

pkgs/python/[email protected]/Cython/Build/BuildExecutable.py:45

CC = get_config_var('CC', os.environ.get('CC', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b816f6df71febc5c — Environment-variable access.

pkgs/python/[email protected]/Cython/Build/BuildExecutable.py:46

CFLAGS = get_config_var('CFLAGS') + ' ' + os.environ.get('CFLAGS', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #139e836d858cbbf2 — Environment-variable access.

pkgs/python/[email protected]/Cython/Build/BuildExecutable.py:47

LINKCC = get_config_var('LINKCC', os.environ.get('LINKCC', CC))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c87dbd546a5b5be — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Cache.py:39

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cae6fce9fde4d2bb — Environment-variable access.

pkgs/python/[email protected]/Cython/Build/Cache.py:60

    if "CYTHON_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fa9e4e7cdfd6018 — Environment-variable access.

pkgs/python/[email protected]/Cython/Build/Cache.py:61

        return os.environ["CYTHON_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0079cb68abfed47a — Environment-variable access.

pkgs/python/[email protected]/Cython/Build/Cache.py:69

            parent = os.environ.get("XDG_CACHE_HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6b65ae4f752d138 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Cache.py:148

                with open(c_file, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd9954a70dbd24ed — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Cache.py:163

            with open(c_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f32b90898815b8bd — Environment-variable access.

pkgs/python/[email protected]/Cython/Build/Dependencies.py:974

        force = os.environ.get("CYTHON_FORCE_REGEN") == "1"  # allow global overrides for build systems

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e8d48ff0221c12d — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Dependencies.py:1161

                f = open(c_file, 'r', encoding='iso8859-1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c543e562f31a7028 — Environment-variable access.

pkgs/python/[email protected]/Cython/Build/Dependencies.py:1214

if os.environ.get('XML_RESULTS'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fba8190814297fdd — Environment-variable access.

pkgs/python/[email protected]/Cython/Build/Dependencies.py:1215

    compile_result_dir = os.environ['XML_RESULTS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34baa03283fe83e2 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Dependencies.py:1234

                output = open(os.path.join(compile_result_dir, name + ".xml"), "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f096cb2c6c8df0cb — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Inline.py:248

            fh = open(pyx_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62bc6980b22d4c9a — Filesystem access.

pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:154

        with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d2a2bea167bfc13 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:353

                with open(html_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b664c07fadf44f27 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:379

        with open(pgo_wrapper_c_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a35a256fcf730ef — Filesystem access.

pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:406

        with open(pyx_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0eb1a39426f95e5 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:44

        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76af0b54dcc050d4 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:51

        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ea35c123e630dd1 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:55

        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be3bdc0a54357a80 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:60

        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2a3297bb3e5ae22 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:67

        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72c37227c7124129 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:73

        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38ee3dffb5b4ee7c — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:89

        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8cb5a46f8f0aa4fb — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:101

        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e4ec3e4d8e8fb9b — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:117

        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2cb912a7c75258c — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:138

        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f56e6ab5a143698c — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:165

        with open(hash_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12550c32109cb380 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestDependencies.py:12

    with open(pjoin(dir_path, filename), "w", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90a77cf4732e7379 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:40

        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e5abea51d211561 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:43

        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb1fce336d9f6afa — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:56

        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6713a1caf73cda5b — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:59

        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c430eb67e7051b2c — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:64

        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f973003a110b232a — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:82

        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49ff289b0ef17f04 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:85

        with open(a_py, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #383af90dbccc69ce — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:98

        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbd5e3ab845075a3 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:101

        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b1c0f6ff2d94e2e — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:106

        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a88d51b5f414aae — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:124

        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5343270ee147565f — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:127

        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e65f83035551885c — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:130

        with open(b_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79e4218f85365904 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:144

        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1efecf44679c5ba — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:147

        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f4e2d8a63e0580c — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:152

        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ede2373686f9afa5 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:175

        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2678cba820ec9352 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:178

        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9a4ded92a8dd17e — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:181

        with open(b_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #275a1b93bf6321ca — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:184

        with open(b_py, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7424dc06bb1cc4e — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:198

        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91f067dc481f6bf7 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:201

        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41cf82468ff5a9f6 — Filesystem access.

pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:206

        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26384746294ef013 — Filesystem access.

pkgs/python/[email protected]/Cython/Compiler/Annotate.py:126

        with open(html_filename, "w", encoding="UTF-8") as out_buffer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d814f285138a99a — Filesystem access.

pkgs/python/[email protected]/Cython/Compiler/FlowControl.py:739

            with open(dot_output, 'w') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9d0446387b7db33 — Filesystem access.

pkgs/python/[email protected]/Cython/Compiler/Main.py:357

            with open(dep_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #499f0bb64284a3aa — Filesystem access.

pkgs/python/[email protected]/Cython/Compiler/Main.py:413

        with open(source_desc.filename, encoding='iso8859-1', newline='') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be7ed645be4c29fc — Filesystem access.

pkgs/python/[email protected]/Cython/Compiler/Main.py:546

            with open(html_filename, encoding="UTF-8") as html_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6edebd15a8071de — Filesystem access.

pkgs/python/[email protected]/Cython/Compiler/Tests/TestParseTreeTransforms.py:269

            f = open(self.debug_dest)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81856085df7e472f — Filesystem access.

pkgs/python/[email protected]/Cython/Coverage.py:313

        with open(c_file, encoding='utf8') as lines:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae896a99fe007c27 — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/Cygdb.py:81

                interpreter_file = open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0167fcee148d09e — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/Cygdb.py:160

    with open(tempfilename) as tempfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #423f86c687e2ad03 — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/DebugWriter.py:81

        with open(interpreter_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c07d8b99be64e0f — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:23

with open(codefile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd7f129376555d72 — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:115

            new_stderr = open(os.devnull, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da544fa617216a13 — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:210

        with open(self.gdb_command_file, 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17f2cf2f2ee96201 — Environment-variable access.

pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:217

        path = os.environ.get('PYTHONPATH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b37f057313e98cf — Environment-variable access.

pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:222

        env = dict(os.environ, PYTHONPATH=os.pathsep.join(paths))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7104c2618d96b455 — Environment-variable access.

pkgs/python/[email protected]/Cython/Debugger/Tests/test_libcython_in_gdb.py:523

_do_debug = os.environ.get('GDB_DEBUG')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fe2ac5e784bae35 — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/Tests/test_libcython_in_gdb.py:525

    _debug_file = open('/dev/tty', 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fd8fd00e0e06117 — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/libcython.py:521

        with open(self.filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a50ae6c2d4fd447a — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/libcython.py:777

                f = open(arg)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e173ea08fe8a60d — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/libpython.py:954

            with open(os_fsencode(filename)) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e219c419b9bac42 — Filesystem access.

pkgs/python/[email protected]/Cython/Debugger/libpython.py:1746

            f = open(os_fsencode(filename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb4f9fed7b1aac3c — Filesystem access.

pkgs/python/[email protected]/Cython/Tempita/_tempita.py:155

        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcf33ffa2f449219 — Environment-variable access.

pkgs/python/[email protected]/Cython/Tempita/_tempita.py:1063

        vars.update(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f59b7f48c2d475c0 — Filesystem access.

pkgs/python/[email protected]/Cython/Tempita/_tempita.py:1077

        with open(template_name, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ea523b4a2018c83 — Filesystem access.

pkgs/python/[email protected]/Cython/Tempita/_tempita.py:1082

        with open(options.output, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db13fe993839d6ba — Filesystem access.

pkgs/python/[email protected]/Cython/TestUtils.py:262

            with open(c_file, encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0ceef09b584aff8 — Filesystem access.

pkgs/python/[email protected]/Cython/TestUtils.py:325

    with open(tree_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b203045b32eb8c5e — Filesystem access.

pkgs/python/[email protected]/Cython/TestUtils.py:336

                    cur_file = open(path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f4186646c0b17ab — Filesystem access.

pkgs/python/[email protected]/Cython/TestUtils.py:381

    with open(file_path, mode=mode, encoding=encoding, newline=newline) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c17cfa97e87aab6 — Filesystem access.

pkgs/python/[email protected]/Cython/Tests/TestTestUtils.py:28

        with open(file_path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3588ddcecb84a17a — Filesystem access.

pkgs/python/[email protected]/Cython/Tests/xmlrunner.py:317

                report_file = open('%s%sTEST-%s.xml' %
                    (test_runner.output, os.sep, suite), 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee363a5a304349b8 — Filesystem access.

pkgs/python/[email protected]/Cython/Utils.py:157

    return open(path, "w", encoding="UTF-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a59dfebb212cf85 — Filesystem access.

pkgs/python/[email protected]/Cython/Utils.py:185

            with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c58c48ae3cc1ebeb — Filesystem access.

pkgs/python/[email protected]/Cython/Utils.py:208

            with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #238ba4b207190088 — Filesystem access.

pkgs/python/[email protected]/Cython/Utils.py:397

            f = open(source_filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8aaad278109bb9e8 — Filesystem access.

pkgs/python/[email protected]/Cython/Utils.py:402

            stream = open(source_filename, encoding=encoding, errors=error_handling)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5eb80231de208144 — Filesystem access.

pkgs/python/[email protected]/Cython/Utils.py:645

    with open(target+'.dep', 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #4c81a9b0f80ae5b5 — Filesystem access.

pkgs/python/[email protected]/Demos/benchmarks/bm_raytrace.py:208

        with open(filename, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #138f164ab461d23e — Filesystem access.

pkgs/python/[email protected]/Demos/benchmarks/report.py:16

        with open(csv_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #39c34095b3113775 — Environment-variable access.

pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:40

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c5e194f50269ea04 — Filesystem access.

pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:88

    with open(tmp_dir / 'setup.py', 'w') as setup_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ca22288fff1cafab — Filesystem access.

pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:153

        with open(profile_input) as data_file_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8c28a282937bb838 — Filesystem access.

pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:154

            with open(data_file_name, mode='w') as data_file_out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1df05fae6222ccf0 — Environment-variable access.

pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:275

    logging.info(f"CFLAGS={os.environ.get('CFLAGS', DISTUTILS_CFLAGS)}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6c95ac2b7bc4d5be — Filesystem access.

pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:534

        with open(options.report_csv, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #14fa7de25eb3d3e8 — Filesystem access.

pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:541

        with open(options.report_sizes_csv, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b69d0c20cc0e3bc — Filesystem access.

pkgs/python/[email protected]/Demos/embed/assert_equal.py:5

f1 = open(sys.argv[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5dc5a5c528f6c3d5 — Filesystem access.

pkgs/python/[email protected]/Demos/embed/assert_equal.py:6

f2 = open(sys.argv[2])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #475eef6f73c15d11 — Filesystem access.

pkgs/python/[email protected]/Tools/cevaltrace.py:34

    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88e5be1485bb409a — Filesystem access.

pkgs/python/[email protected]/Tools/cevaltrace.py:71

        with open(code_obj.co_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c81f0a18960c4fa3 — Filesystem access.

pkgs/python/[email protected]/Tools/cevaltrace.py:97

        with open(version_header) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b29084b8a583ea0 — Filesystem access.

pkgs/python/[email protected]/Tools/cython-generate-lexicon.py:50

    with open(Lexicon.__file__, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab532bf04769cf9e — Filesystem access.

pkgs/python/[email protected]/Tools/cython-generate-lexicon.py:67

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab89b6f3506425d0 — Filesystem access.

pkgs/python/[email protected]/Tools/cython-generate-shadow-pyi.py:34

    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c2136dcfb0b0fb8 — Filesystem access.

pkgs/python/[email protected]/Tools/cython-generate-shadow-pyi.py:43

    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8929e9f0e3449b75 — Filesystem access.

pkgs/python/[email protected]/Tools/cython-generate-shadow-pyi.py:65

    with open(file_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #ae5aa9fd031d65ff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/Tools/download_release.py:32

    with urlopen(request) as res:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #71ebb8423c656a72 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/Tools/download_release.py:59

    with urlopen(wheel_url) as w:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #e0bcab71a6145895 — Filesystem access.

pkgs/python/[email protected]/Tools/download_release.py:68

                with open(temp_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #b400b8f951f4d1ab — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/Tools/dump_github_issues.py:30

    with urlopen("https://api.github.com/rate_limit") as p:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8dc60cfdced272b0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/Tools/dump_github_issues.py:40

    with urlopen(url) as p:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #91475e8f7660f782 — Filesystem access.

pkgs/python/[email protected]/Tools/examine_sanitizer_logs.py:8

    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0b3dd54e643630a — Filesystem access.

pkgs/python/[email protected]/Tools/gen_tests_for_posix_pxds.py:37

    with open(TEST_PATH, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fd38f4b4d218310 — Filesystem access.

pkgs/python/[email protected]/Tools/jedityper.py:112

        with open(target_path, 'w', encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01183677a546de47 — Filesystem access.

pkgs/python/[email protected]/Tools/make_dataclass_tests.py:422

    with open(py_module_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afcdebb81a55c72a — Filesystem access.

pkgs/python/[email protected]/Tools/make_dataclass_tests.py:431

    with open(output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18fcc211c080b392 — Filesystem access.

pkgs/python/[email protected]/pyximport/pyximport.py:146

        with open(dependfile) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a786b7d3b09b46f — Environment-variable access.

pkgs/python/[email protected]/runtests.py:401

        cc = os.environ.get('CXX') or sysconfig.get_config_var('CXX')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ad952aaecb2cd85 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:403

        cc = os.environ.get('CC') or sysconfig.get_config_var('CC')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34f2183000460c53 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:414

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82e7115c7e2a3be8 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:522

INCLUDE_DIRS = [ d for d in os.getenv('INCLUDE', '').split(os.pathsep) if d ]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1469636abdc59f28 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:523

CFLAGS = os.getenv('CFLAGS', '').split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be45ceb9bb6d911b — Environment-variable access.

pkgs/python/[email protected]/runtests.py:524

CCACHE = os.getenv('CYTHON_RUNTESTS_CCACHE', '').split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b75cb1d0f51aba2 — Filesystem access.

pkgs/python/[email protected]/runtests.py:549

    with io_open(filepath, encoding='ISO-8859-1', errors='ignore') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f77e05bbb7c223a6 — Filesystem access.

pkgs/python/[email protected]/runtests.py:1070

            with open(self.module_path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24f1345ffc3e6adc — Filesystem access.

pkgs/python/[email protected]/runtests.py:1191

                with open(src) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc8f53cda82048c0 — Filesystem access.

pkgs/python/[email protected]/runtests.py:1192

                    with open(dest, 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb1a89e151d92076 — Filesystem access.

pkgs/python/[email protected]/runtests.py:1211

        with io_open(source_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa7d2fb50dc99002 — Filesystem access.

pkgs/python/[email protected]/runtests.py:1216

        with io_open(source_file, 'r', encoding='ISO-8859-1') as source_and_output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9ee0d9a7b34fffc — Filesystem access.

pkgs/python/[email protected]/runtests.py:1218

            out = io_open(os.path.join(workdir, os.path.basename(source_file)),
                          'w', encoding='ISO-8859-1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e28f3cfdc059e91 — Filesystem access.

pkgs/python/[email protected]/runtests.py:1442

                    with open(os.path.join(workdir, file)) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #350de83a3eb6ce0d — Filesystem access.

pkgs/python/[email protected]/runtests.py:1444

                    with open(os.path.join(workdir2, file)) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67c8d03ec7640ad5 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:2045

        old_path = os.environ.get('PYTHONPATH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0907424bed98c8f1 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:2051

        env = dict(os.environ, PYTHONPATH=new_path, PYTHONIOENCODING='utf8',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbd7261ac9e50479 — Filesystem access.

pkgs/python/[email protected]/runtests.py:2218

        with open(list_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a05c04b669a47f20 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:2351

    os.environ['CYTHON_PROJECT_DIR'] = os.path.abspath(os.path.dirname(__file__))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2726dfea292c4140 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:2604

        if "PYTHONIOENCODING" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c7d5fec9df9213b — Environment-variable access.

pkgs/python/[email protected]/runtests.py:2606

            os.environ["PYTHONIOENCODING"] = sys.stdout.encoding or sys.getdefaultencoding()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c00c6f5184e15e18 — Filesystem access.

pkgs/python/[email protected]/runtests.py:2766

        with open("coverage-report.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32b8b968c92643ce — Environment-variable access.

pkgs/python/[email protected]/runtests.py:2989

    if 'CI' in os.environ and sys.platform == 'darwin' and 'cpp' in languages:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1369dadda977db8 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:3081

    old_faulhandler_envvar = os.environ.get('PYTHONFAULTHANDLER')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9aed8cff3efaaa62 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:3087

        os.environ['PYTHONFAULTHANDLER'] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75dd5babe47a6bf7 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:3112

        if os.environ.get('PYTHONFAULTHANDLER') != old_faulhandler_envvar:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8abd25795207c48a — Environment-variable access.

pkgs/python/[email protected]/runtests.py:3114

                del os.environ['PYTHONFAULTHANDLER']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d99d8fa4cb9fa12 — Environment-variable access.

pkgs/python/[email protected]/runtests.py:3116

                os.environ['PYTHONFAULTHANDLER'] = old_faulhandler_envvar

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a952b6dd56acb4f0 — Environment-variable access.

pkgs/python/[email protected]/setup.py:27

    os.environ['COPY_EXTENDED_ATTRIBUTES_DISABLE'] = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96b6533f4936cf84 — Environment-variable access.

pkgs/python/[email protected]/setup.py:28

    os.environ['COPYFILE_DISABLE'] = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #362b5a091fcca740 — Environment-variable access.

pkgs/python/[email protected]/setup.py:129

        'pgen', path=os.pathsep.join([os.environ['PATH'], os.path.join(get_path('include'), '..', 'Parser')]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b491e40c3ee60ecc — Filesystem access.

pkgs/python/[email protected]/setup.py:246

    with open("CHANGES.rst", encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #548d2023efcf3425 — Environment-variable access.

pkgs/python/[email protected]/setup.py:320

    if os.environ.get(env_var) == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18193db5864d221b — Environment-variable access.

pkgs/python/[email protected]/setup.py:349

    env_var = os.environ.get(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

joblib

python dependency

expand_more 30 low-confidence finding(s)

low env_fs dependency Excluded from app score #0086325e22e2e979 — Environment-variable access.

pkgs/python/[email protected]/conftest.py:73

    DEFAULT_BACKEND = os.environ.get("JOBLIB_TESTS_DEFAULT_PARALLEL_BACKEND", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d57f05222702e581 — Environment-variable access.

pkgs/python/[email protected]/conftest.py:110

        os.environ.get(k) is None for k in ParallelBackendBase.MAX_NUM_THREADS_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #baf9955123ce2384 — Environment-variable access.

pkgs/python/[email protected]/joblib/__init__.py:163

os.environ.setdefault("KMP_INIT_AT_FORK", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #133b34e74fa9cc01 — Environment-variable access.

pkgs/python/[email protected]/joblib/_memmapping_reducer.py:209

        temp_folder = os.environ.get("JOBLIB_TEMP_FOLDER", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74fb5eca89ba45d4 — Environment-variable access.

pkgs/python/[email protected]/joblib/_multiprocessing_helpers.py:13

mp = int(os.environ.get("JOBLIB_MULTIPROCESSING", 1)) or None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02a5bd5bbaf74d34 — Environment-variable access.

pkgs/python/[email protected]/joblib/_parallel_backends.py:238

                var_value = os.environ.get(var, default_n_threads)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb95fcfea18a5ebe — Environment-variable access.

pkgs/python/[email protected]/joblib/_parallel_backends.py:244

        if self.TBB_ENABLE_IPC_VAR not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #526676876aa3f4ca — Filesystem access.

pkgs/python/[email protected]/joblib/_store_backends.py:480

                with open(gitignore, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #faccfb8ff38956e3 — Filesystem access.

pkgs/python/[email protected]/joblib/compressor.py:289

            self._fp = io.open(filename, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0924773ea1fd3159 — Filesystem access.

pkgs/python/[email protected]/joblib/externals/loky/backend/context.py:151

        with open(cpu_max_fname) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d37daf1242f56a2a — Filesystem access.

pkgs/python/[email protected]/joblib/externals/loky/backend/context.py:156

        with open(cfs_quota_fname) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d8efcede6449055 — Filesystem access.

pkgs/python/[email protected]/joblib/externals/loky/backend/context.py:158

        with open(cfs_period_fname) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e791be49f45935d1 — Environment-variable access.

pkgs/python/[email protected]/joblib/externals/loky/backend/context.py:199

            and os.environ.get("LOKY_MAX_CPU_COUNT") is None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9124239ffd68b834 — Environment-variable access.

pkgs/python/[email protected]/joblib/externals/loky/backend/context.py:222

    cpu_count_loky = int(os.environ.get("LOKY_MAX_CPU_COUNT", os_cpu_count))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e61268325b949ee — Environment-variable access.

pkgs/python/[email protected]/joblib/externals/loky/backend/fork_exec.py:21

    env = {**os.environ, **env}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc85ba2a1ebe0b55 — Environment-variable access.

pkgs/python/[email protected]/joblib/externals/loky/backend/popen_loky_win32.py:73

        child_env = {**os.environ, **process_obj.env}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e67319ff8919973 — Filesystem access.

pkgs/python/[email protected]/joblib/externals/loky/backend/popen_loky_win32.py:83

        with open(wfd, "wb") as to_child:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af72579993d139e8 — Environment-variable access.

pkgs/python/[email protected]/joblib/externals/loky/backend/reduction.py:89

ENV_LOKY_PICKLER = os.environ.get("LOKY_PICKLER", DEFAULT_ENV)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #412a970fda4753ac — Filesystem access.

pkgs/python/[email protected]/joblib/externals/loky/backend/resource_tracker.py:284

        with open(fd, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07cd9c8ccd1818e3 — Environment-variable access.

pkgs/python/[email protected]/joblib/externals/loky/process_executor.py:93

MAX_DEPTH = int(os.environ.get("LOKY_MAX_DEPTH", 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f145ff715dfcfdb3 — Environment-variable access.

pkgs/python/[email protected]/joblib/externals/loky/process_executor.py:382

    if "PYTHONFAULTHANDLER" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33462db47747b71e — Environment-variable access.

pkgs/python/[email protected]/joblib/externals/loky/process_executor.py:388

            f"PYTHONFAULTHANDLER={os.environ['PYTHONFAULTHANDLER']}."

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #421d614379c0cab3 — Filesystem access.

pkgs/python/[email protected]/joblib/logger.py:125

                with open(logfile, "w") as logfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10fc1f0f5a503898 — Filesystem access.

pkgs/python/[email protected]/joblib/logger.py:150

                with open(self.logfile, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a8efa37fe6f4040 — Filesystem access.

pkgs/python/[email protected]/joblib/numpy_pickle.py:599

        with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6fa3aec9bbfbd3a — Filesystem access.

pkgs/python/[email protected]/joblib/numpy_pickle.py:650

    with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bae4751b0f43c7b4 — Filesystem access.

pkgs/python/[email protected]/joblib/numpy_pickle.py:735

        with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c65cdfda315fed9 — Filesystem access.

pkgs/python/[email protected]/joblib/numpy_pickle_compat.py:156

        with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6d644138d88f26f — Filesystem access.

pkgs/python/[email protected]/joblib/numpy_pickle_compat.py:230

    with open(filename, "rb") as file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #098e6b824d980b5d — Environment-variable access.

pkgs/python/[email protected]/joblib/parallel.py:581

    method = os.environ.get("JOBLIB_START_METHOD", "").strip() or None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

memory_profiler

python dependency

expand_more 6 low-confidence finding(s)

low env_fs dependency Excluded from app score #fcc2ed77da5852d0 — Environment-variable access.

pkgs/python/[email protected]/memory_profiler.py:494

    path = os.getenv('PATH', os.defpath).split(os.pathsep)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e9264b6b1bffb65 — Filesystem access.

pkgs/python/[email protected]/memory_profiler.py:1015

            with open(text_file, 'w') as pfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2e0eaedd99021ba — Filesystem access.

pkgs/python/[email protected]/memory_profiler.py:1251

        with io.open(filename, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1dbf58fd72a93af — Filesystem access.

pkgs/python/[email protected]/memory_profiler.py:1356

            out_file = open(args.out_filename, "a")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efd6763d7227a839 — Filesystem access.

pkgs/python/[email protected]/mprof.py:281

    with open(mprofile_output, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #464d0a70fb6d1339 — Filesystem access.

pkgs/python/[email protected]/mprof.py:360

    f = open(filename, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

meson-python

python dependency

expand_more 30 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #f9622b323051f18d — Environment-variable access.

pkgs/python/[email protected]/docs/conf.py:10

_build_time = int(os.environ.get('SOURCE_DATE_EPOCH', time.time()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0a11e7be25e787c — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:212

    if 'NO_COLOR' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #046018b08bb05220 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:215

    if 'FORCE_COLOR' in os.environ or sys.stdout.isatty() and os.environ.get('TERM') != 'dumb':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #45c078b72951bbd6 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:216

        if sys.platform == 'win32' and not os.environ.get('ANSICON'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bddddedcafbae23c — Filesystem access.

pkgs/python/[email protected]/mesonpy/__init__.py:317

    with open(file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d15e65b794e018d — Filesystem access.

pkgs/python/[email protected]/mesonpy/__init__.py:681

        pyproject = tomllib.loads(self._source_dir.joinpath('pyproject.toml').read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c89bcd37bf2ebdd3 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:700

        os.environ.setdefault('NINJA', self._ninja)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54f8912e50896480 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:711

            archflags = os.environ.get('ARCHFLAGS', '').strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b172f58808d54a35 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:726

                    x = os.environ.setdefault('_PYTHON_HOST_PLATFORM', f'macosx-{macver}-{arch}')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f24578411ab4f65b — Filesystem access.

pkgs/python/[email protected]/mesonpy/__init__.py:744

                    self._meson_cross_file.write_text(cross_file_data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f13d94b5f398e9be — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:750

        elif sysconfig.get_platform().startswith('android-') and 'CIBUILDWHEEL' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c73720e2f3cc3b8 — Filesystem access.

pkgs/python/[email protected]/mesonpy/__init__.py:776

            self._meson_cross_file.write_text(cross_file_data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1fe7cc6ced740e6d — Filesystem access.

pkgs/python/[email protected]/mesonpy/__init__.py:804

            self._meson_cross_file.write_text(cross_file_data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74efe7fde300983f — Filesystem access.

pkgs/python/[email protected]/mesonpy/__init__.py:812

        self._meson_native_file.write_text(native_file_data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6c6e5fa28a8dc75 — Filesystem access.

pkgs/python/[email protected]/mesonpy/__init__.py:944

        return json.loads(info.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05ea623619114d35 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:1172

    meson = os.environ.get('MESON', meson or 'meson')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c6cba7cc39d014e — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:1207

    env_ninja = os.environ.get('NINJA')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37b9aeaba2869555 — Filesystem access.

pkgs/python/[email protected]/mesonpy/__init__.py:1219

    directory.joinpath('.gitignore').write_text(textwrap.dedent('''
        # This file is generated by meson-python. It will not be recreated if deleted or modified.
        *
    '''), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bff5d1635557adbd — Filesystem access.

pkgs/python/[email protected]/mesonpy/__init__.py:1223

    directory.joinpath('.hgignore').write_text(textwrap.dedent('''
        # This file is generated by meson-python. It will not be recreated if deleted or modified.
        syntax: glob
        **/*
    '''), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e168051b83a8476 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:1247

    if os.environ.get('NINJA') is None and _env_ninja_command() is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a1815590f70adb5 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/__init__.py:1257

    if os.environ.get('NINJA') is None and _env_ninja_command() is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8d242516b3fb8f8 — Filesystem access.

pkgs/python/[email protected]/mesonpy/_compat.py:23

        return importlib.resources.files(package).joinpath(resource).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3eb38cdb56ee4f9 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/_editable.py:310

        if self._build_path in os.environ.get(MARKER, '').split(os.pathsep):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b979b2d3603d685a — Environment-variable access.

pkgs/python/[email protected]/mesonpy/_editable.py:336

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9dec56d81350d4b7 — Filesystem access.

pkgs/python/[email protected]/mesonpy/_editable.py:351

        with open(install_plan_path, 'r', encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e20eebd926d8003 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/_tags.py:105

        arch = os.environ.get('_PYTHON_HOST_PLATFORM', '').split('-')[2]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fda72d8073d88c25 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/_tags.py:112

        parts = os.environ.get('MACOSX_DEPLOYMENT_TARGET', '').split('.')[:2]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0cd26e84691874d — Environment-variable access.

pkgs/python/[email protected]/mesonpy/_tags.py:168

        parts = os.environ.get('IPHONEOS_DEPLOYMENT_TARGET', '').split('.')[:2]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #023e64be77940710 — Environment-variable access.

pkgs/python/[email protected]/mesonpy/_wheelfile.py:46

        timestamp = int(os.environ.get('SOURCE_DATE_EPOCH', mtime or time.time()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b250c91c1973fb49 — Filesystem access.

pkgs/python/[email protected]/mesonpy/_wheelfile.py:97

        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

narwhals

python dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #493717cd0998c007 — Environment-variable access.

pkgs/python/[email protected]/src/narwhals/_utils.py:1469

        terminal_width = int(os.getenv("COLUMNS", 80))  # noqa: PLW1508

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

numpy

python dependency

expand_more 982 low-confidence finding(s)

low env_fs dependency Excluded from app score #53671277cb90f68f — Filesystem access.

pkgs/python/[email protected]/.spin/cmds.py:124

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1b090efef456198 — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:326

    PATH = os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #906915852e07eda7 — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:331

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9ff86647fb0980f — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:505

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9030a1fe505f9061 — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:523

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #848aea44e6652028 — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:547

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #363f081e05e0940a — Filesystem access.

pkgs/python/[email protected]/.spin/cmds.py:629

        with open(local, "wt", encoding="utf8") as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61f9b9a3fea61962 — Filesystem access.

pkgs/python/[email protected]/.spin/cmds.py:632

        with open(pkg_config_fname, "wt", encoding="utf8") as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #294cd9dc82e5c394 — Environment-variable access.

pkgs/python/[email protected]/benchmarks/benchmarks/__init__.py:12

    if 'SHELL' in os.environ and sys.platform != 'win32':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c6152d744905e224 — Filesystem access.

pkgs/python/[email protected]/benchmarks/benchmarks/__init__.py:35

        with open(lock_path, 'a+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e3157a9d393bb10c — Filesystem access.

pkgs/python/[email protected]/doc/neps/tools/build_index.py:34

        with open(source) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ad49a166e6268a9d — Filesystem access.

pkgs/python/[email protected]/doc/neps/tools/build_index.py:125

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e82b5af058637d2 — Filesystem access.

pkgs/python/[email protected]/doc/postprocess.py:18

        with open(fn, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cab7f3dd99b0c1ec — Filesystem access.

pkgs/python/[email protected]/doc/postprocess.py:24

        with open(fn, 'w', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f42de7a7425e682 — Filesystem access.

pkgs/python/[email protected]/doc/preprocess.py:18

    with open(gen_path, 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #656fa74b3ed53cc6 — Filesystem access.

pkgs/python/[email protected]/doc/preprocess.py:35

    with open(os.path.join(dsrc_path, "doxyfile")) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2e5bc95fd3ea2e6 — Filesystem access.

pkgs/python/[email protected]/doc/preprocess.py:44

            with open(conf_path) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8327fb87a3fe4ce — Environment-variable access.

pkgs/python/[email protected]/doc/source/conf.py:247

if os.environ.get('CIRCLE_JOB') and os.environ['CIRCLE_BRANCH'] != 'main':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db6b7f4686aeab95 — Environment-variable access.

pkgs/python/[email protected]/doc/source/conf.py:249

    switcher_version = os.environ['CIRCLE_BRANCH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb2549dfe31b4130 — Environment-variable access.

pkgs/python/[email protected]/numpy/__init__.py:881

        use_hugepage = os.environ.get("NUMPY_MADVISE_HUGEPAGE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59c7eeb38d5bd510 — Environment-variable access.

pkgs/python/[email protected]/numpy/__init__.py:913

    if (os.environ.get("NPY_PROMOTION_STATE", "weak") != "weak"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #578dd43afde222d9 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/conv_template.py:270

    with open(source) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad861ce0d4dc00e1 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/conv_template.py:320

        fid = open(file, 'r')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0214ab4d517256fa — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/conv_template.py:323

        outfile = open(newname, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #429c064ac6e742a1 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/gitversion.py:8

    with open(init) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a438c8a71a6c3120 — Environment-variable access.

pkgs/python/[email protected]/numpy/_build_utils/gitversion.py:89

                os.environ.get('MESON_DIST_ROOT', ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b151b4735f075c9 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/gitversion.py:98

        with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #654860909b90d0d6 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/process_src_template.py:32

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb5bb4b156fd5db4 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/tempita.py:34

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c83cc82e7a47d70 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/tempita/_tempita.py:164

        with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3603918f342cf91 — Environment-variable access.

pkgs/python/[email protected]/numpy/_build_utils/tempita/_tempita.py:1090

        vars.update(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ba2c2f4830e2bd5 — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/tempita/_tempita.py:1104

        with open(template_name, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fee19ebdbb5c395f — Filesystem access.

pkgs/python/[email protected]/numpy/_build_utils/tempita/_tempita.py:1109

        with open(options.output, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64f576fca3a77ca6 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/__init__.py:17

    if envkey not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d434297fde6db96 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/_add_newdocs_scalars.py:60

            machine = os.environ.get('PROCESSOR_ARCHITEW6432', '') \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdb6f054afa9119b — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/_add_newdocs_scalars.py:61

                    or os.environ.get('PROCESSOR_ARCHITECTURE', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32f01f7dc10a9866 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/_methods.py:242

        ctx = open(os.fspath(file), "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ab8702befe1f541 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/genapi.py:249

        fo = open(filename, 'r')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43c0e2e3c16fa490 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/genapi.py:321

        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0808f364ff63cf0a — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/genapi.py:325

    with open(filename, 'w') as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #813d02d502f8bed5 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/genapi.py:537

    with open(file) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #895262f01ef3ac85 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/generate_umath.py:1689

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6bab0b4eb0fe6d8 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/code_generators/generate_umath_doc.py:20

    with open(target, 'w') as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb84dd2f3e8720d0 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/memmap.py:235

            f_ctx = open(
                os.fspath(filename),
                ('r' if mode == 'c' else mode) + 'b'
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6f1367a15da2663 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/records.py:901

        ctx = open(os.fspath(fd), 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4a5c7254cf70271 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/src/common/pythoncapi-compat/upgrade_pythoncapi.py:608

        with open(filename, encoding=encoding, errors=errors, newline="") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a53b037e0e0fc916 — Filesystem access.

pkgs/python/[email protected]/numpy/_core/src/common/pythoncapi-compat/upgrade_pythoncapi.py:627

        with open(filename, "w", encoding=encoding, errors=errors, newline="") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #dcecda8b91839b72 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:85

if 'REPO_NAME' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #baadbc9173b89a2f — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:86

   REPO_NAME = os.environ['REPO_NAME']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #8b6603be09bad7bd — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:91

if 'current_language' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #03b4407bef3194e0 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:93

   current_language = os.environ['current_language']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #bd4ea2f326ccf94e — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:106

if 'current_version' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #8a98fca36c188760 — Environment-variable access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/conf.py:108

   current_version = os.environ['current_version']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #be7c268334ed1f5f — Filesystem access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/mm-converter.py:59

    data = open(file, 'r').read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #a2bb7103dbab286c — Filesystem access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/mm-converter.py:73

        with open(ext_file, 'w') as handler:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling reachable #629e1fec7890f69a — Filesystem access.

pkgs/python/[email protected]/numpy/_core/src/highway/docs/mm-converter.py:83

            data = open(ext_file, 'r').read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af6922a4aa8bd2e5 — Environment-variable access.

pkgs/python/[email protected]/numpy/conftest.py:60

os.environ["NUMPY_EXPERIMENTAL_DTYPE_API"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2c5cc3e489d0efb — Environment-variable access.

pkgs/python/[email protected]/numpy/conftest.py:100

        os.environ['NPY_AVAILABLE_MEM'] = available_mem

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b5dd98760dd12fa — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/_backends/_meson.py:71

        return self.build_template_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #daaf3af9f37a86c1 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/_backends/_meson.py:181

        meson_build_file.write_text(src)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #880484bc60b105bb — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/_src_pyf.py:215

    with open(source) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95f3e13b00a71d1f — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/auxfuncs.py:920

    with open(source) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ae8c145b1b4c749 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/capi_maps.py:158

        with open(f2cmap_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b549d00058ea35bd — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/crackfortran.py:318

        with open(filename, 'rb') as fhandle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d25254ed42bd5f11 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/crackfortran.py:329

    return open(filename, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4163f8fc2bc9e05 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/crackfortran.py:3705

                open(l).close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f1d83384175a9c9 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/crackfortran.py:3724

        with open(pyffilename, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62d45c1272c0b464 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/f2py2e.py:290

                with open(l):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #557b1864b34870f8 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/f2py2e.py:357

            with open(options['signsfile'], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #641f993f25a25976 — Environment-variable access.

pkgs/python/[email protected]/numpy/f2py/rules.py:161

generationtime = int(os.environ.get('SOURCE_DATE_EPOCH', time.time()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #340ae2ca7dd171a2 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/rules.py:1436

    with open(fn, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db88ad97b2bcebab — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/rules.py:1443

        with open(fn, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84adf9c421053255 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/rules.py:1451

        with open(fn, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a89d4ff164d17344 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/rules.py:1464

        with open(wn, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4fc681ad617dde2 — Filesystem access.

pkgs/python/[email protected]/numpy/f2py/rules.py:1489

        with open(wn, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #f659769459d7226f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/numpy/lib/_datasource.py:333

            with urlopen(path) as openedurl:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bf3ae7e685bbc28f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/numpy/lib/_datasource.py:475

                netfile = urlopen(path)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #9af7bbc34212c3bd — Filesystem access.

pkgs/python/[email protected]/numpy/lib/_format_impl.py:968

        with open(os.fspath(filename), mode + 'b') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1dbeafb40d590887 — Filesystem access.

pkgs/python/[email protected]/numpy/lib/_format_impl.py:973

        with open(os.fspath(filename), 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6738a80324661c23 — Filesystem access.

pkgs/python/[email protected]/numpy/lib/_npyio_impl.py:454

            fid = stack.enter_context(open(os.fspath(file), "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac2f1b192b3c034c — Filesystem access.

pkgs/python/[email protected]/numpy/lib/_npyio_impl.py:568

        file_ctx = open(file, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07d607b10d189b7a — Filesystem access.

pkgs/python/[email protected]/numpy/lib/_npyio_impl.py:1549

        open(fname, 'wt').close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aaca32be57fa3383 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/clapack_scrub.py:308

    with open(filename) as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bdeb078f310dd09 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/clapack_scrub.py:318

    with open(outfilename, 'w') as writefo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e63748a1ffaa4229 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/fortran.py:116

    with open(filename) as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1e750a482947013 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:230

    with open(wrapped_routines_file) as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #890425d5cbc3a2c0 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:250

        with open(filename, 'w') as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39d7bbcb3d5d954c — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:256

    with open(output_file, 'w') as output_fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #817fd584b3697e53 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:258

            with open(r.filename) as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #695dcbc64b6afd10 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:275

    with open(c_file) as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be9270367865d510 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:278

    with open(c_file, 'w') as fo:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f5b007f605ae786 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:301

        with open(fn) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26499165df1b95fb — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:309

    with open('f2c.h') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a16a3a94a913487 — Filesystem access.

pkgs/python/[email protected]/numpy/linalg/lapack_lite/make_lite.py:315

    with open(os.path.join(output_dir, 'lapack_lite_names.h'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee8ead62ff214c75 — Filesystem access.

pkgs/python/[email protected]/numpy/ma/mrecords.py:626

        f = open(fname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f5d1261e8e58259 — Filesystem access.

pkgs/python/[email protected]/numpy/random/_examples/cffi/parse.py:12

    with open(os.path.join(inc_dir, 'random', 'bitgen.h')) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84a5dda33da90e37 — Filesystem access.

pkgs/python/[email protected]/numpy/random/_examples/cffi/parse.py:21

    with open(os.path.join(inc_dir, 'random', 'distributions.h')) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd4fef5f7659bee4 — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/extbuild.py:209

    with open(cfile.parent / "meson.build", "wt") as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3eaa51965e2b8311 — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/extbuild.py:223

    with open(native_file_name, "wt") as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a0cd66695b97ca7 — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/utils.py:72

                np_dist.read_text('direct_url.json') or '{}',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #894229e2821ee32e — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/utils.py:179

            with open(_proc_pid_stat) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #346e5fafc9aed16e — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/utils.py:208

            with open(_proc_pid_stat) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf7cfccbb129c2c9 — Environment-variable access.

pkgs/python/[email protected]/numpy/testing/_private/utils.py:2711

    env_value = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4913e21248ec64ec — Filesystem access.

pkgs/python/[email protected]/numpy/testing/_private/utils.py:2763

        with open('/proc/meminfo') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #eda0256503105c26 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:57

        with open(self.path, "r") as source:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #338ec49749cccc7c — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:66

        with open(self.path, 'r') as source:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #96b74dd3da291614 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:96

            with open(os.path.join(root, self.clean_path(path)), "w") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #93ab07706650faa3 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:97

                source.write_text(fd)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2fa57e5ac7ad17da — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:101

            with open(
                os.path.join(root, self.clean_path(path) + ".html"), "w"
            ) as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #3de9f9952cb97988 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:106

        with open(os.path.join(root, 'index.html'), 'w') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a2a02a80cb6b5c77 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:165

        with open(log_file, 'r') as log_fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7b98a338631dbba9 — Filesystem access.

pkgs/python/[email protected]/tools/c_coverage/c_coverage_report.py:176

        files.write_text(args.directory)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #4a4db4af5c8b1ba2 — Filesystem access.

pkgs/python/[email protected]/tools/check_installed_files.py:108

    with open(os.path.join('build', 'meson-info',
                           'intro-install_plan.json'), 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f62b09a2273f7844 — Filesystem access.

pkgs/python/[email protected]/tools/check_openblas_version.py:48

        with open(reqfile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #dbdedb17103e398d — Filesystem access.

pkgs/python/[email protected]/tools/check_python_h_first.py:77

    with open(name_to_check) as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #4ece2ab5947dfa1f — Filesystem access.

pkgs/python/[email protected]/tools/functions_missing_types.py:101

        with open(module_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6c518d574a24473d — Filesystem access.

pkgs/python/[email protected]/tools/get_submodule_paths.py:12

    with open(gitmodule_file) as gitmodules:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6c73b9a7dd8043ac — Filesystem access.

pkgs/python/[email protected]/tools/get_submodule_paths.py:19

    with open(
            os.path.join(root_directory, ".gitattributes"), "r"
    ) as attr_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #679782982cb8057d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/ci/ciimage/build.py:21

        data = json.loads(path.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47b0d0897370aa57 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/ci/ciimage/build.py:83

        out_file.write_text(out_data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c48867a702ed9de — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/ci/ciimage/build.py:100

        out_file.write_text(out_data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a2c90b2813c7826 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/ci/ciimage/build.py:140

        out_file.write_text(out_data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #14ff1f34b6f8656f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/extensions/refman_links.py:128

        raw = Path(self._data_file).read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b09b022379c45fea — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/genrelnotes.py:71

            snippet = snippetfile.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2cb115e490df96be — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/jsonvalidator.py:146

    root_tmp = json.loads(args.doc_file.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #3c11b0eb30774215 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatorjson.py:115

        self.out.write_text(json.dumps(data), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #5c5d4433c33ea31e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatorman.py:65

        self.path.write_text(self.text, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #75d4780715da9d43 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatormd.py:116

        out_file.write_text(data, encoding='ascii')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #cb2bc75ff4cc6abf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatormd.py:129

            template=template_file.read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0d890bbe44ee781d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatormd.py:360

        raw = self.sitemap_in.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #5056056b4d154db3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatormd.py:371

        self.sitemap_out.write_text(out, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #05fffa8948baff2d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatormd.py:393

        self.link_def_out.write_text(json.dumps(data, indent=2), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a608c300a1701e0a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatorvim.py:30

            template=template_file.read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #62bba1194bc6a57b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/generatorvim.py:37

        out_file.write_text(result, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #9a3080ba91448d39 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/loaderbase.py:194

        return f.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2b83512c39d03714 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/loaderpickle.py:16

        res = pickle.loads(self.in_file.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f5baf8f95a940e27 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/refman/main.py:76

        args.depfile.write_text(out_text, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #8688842b6f04caa3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/docs/validatelinks.py:16

        async with session.get(url, timeout=timeout) as r:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #1bf7935ec4c644ab — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/docs/validatelinks.py:24

    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #4e7a37cbcdd3aeef — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/manual tests/4 standalone binaries/build_windows_package.py:14

    response = urllib.request.urlopen(sdl_url, timeout=600.0)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #b7e005f4e17afcdf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/manual tests/4 standalone binaries/build_windows_package.py:16

    open(sdl_filename, 'wb').write(data)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba05ad247db65278 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:454

            return open(outfileabs_tmp, 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51447be0b8e9c1ab — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:623

            with open(rsp_file, 'w', encoding='utf-8', newline='\n') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18fe62093e2a34c3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:727

        with open(exe_data, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc357e23fd20a0ec — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:734

        with open(test_data, 'wb') as datafile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be344d20d410595a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:737

        with open(benchmark_data, 'wb') as datafile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1ad3ce47859f90e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:902

        with open(pch_file_tmp, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11f71de35e808e49 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:1314

        with open(ifilename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e0b3f2e998b3302 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:1345

        with open(filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ecfd90ae3f7b02a7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/backends.py:1676

        with open(install_data_file, 'wb') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #deb57cadd8999552 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:548

                return open(tempfilename, 'a', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c26a216384de1eac — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:553

            return open(tempfilename, 'a', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6492915d2673e713 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:557

        with open(filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cbbdb745891852f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:590

                    with open(tempfilename, 'ab') as binfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9457f3a3424b3d6d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:592

                    return open(tempfilename, 'a', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cd489845300e6de — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:634

        with open(tempfilename, 'w', encoding='utf-8') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bea44152f1a8d62 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:716

        with open(os.path.join(self.environment.get_build_dir(), 'rust-project.json'),
                  'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c5b884150fa3d71 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:748

            with open(os.path.join(builddir, 'compile_commands.json'), 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58e3ed56e8f33a8c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:1169

            with open(pickle_abs, 'rb') as p:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7260b56af222b25 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:1174

            with open(pickle_abs, 'wb') as p:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #467f4ea8a573baee — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:1505

        with open(manifest_fullpath, 'w', encoding='utf-8') as manifest:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cfbe07861f53beb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:2896

            with open(filename, encoding='ascii', errors='ignore') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75a75f55aa246ad7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:3377

                in_file = Path(os.environ['VCToolsInstallDir']) / 'modules/std.ixx'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b650520aac6e614d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/ninjabackend.py:3934

        with open(d_file, 'wb') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c33c004f76bc8033 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:36

    vs_version = os.getenv('VisualStudioVersion', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8f94e1133daff60 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:37

    vs_install_dir = os.getenv('VSINSTALLDIR', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f43ad58e345e39a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:300

        with open(Vs2010Backend.get_regen_stampfile(build_dir), 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fb28a59c4cd718b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:304

        has_arch_values = 'VSCMD_ARG_TGT_ARCH' in os.environ and 'VSCMD_ARG_HOST_ARCH' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ba9ed3a939bff8e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:307

        if 'VCINSTALLDIR' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad30443662b0ea4d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:308

            vs_version = os.environ['VisualStudioVersion'] \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e68a9771e09f1990 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:309

                if 'VisualStudioVersion' in os.environ else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b944b124661913df — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:311

            script_path = os.environ['VCINSTALLDIR'] + relative_path + 'vcvarsall.bat'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4795863f1a0a2be7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:314

                    target_arch = os.environ['VSCMD_ARG_TGT_ARCH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27f185d8b12910c0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:315

                    host_arch = os.environ['VSCMD_ARG_HOST_ARCH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #948f7bd805f660b1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:317

                    target_arch = os.environ.get('Platform', 'x86')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc641ffd97c53888 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:323

        if 'VS150COMNTOOLS' in os.environ and has_arch_values:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #614e1b0247653ce3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:324

            script_path = os.environ['VS150COMNTOOLS'] + 'VsDevCmd.bat'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56d843c01d3c7c6f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:327

                    (script_path, os.environ['VSCMD_ARG_TGT_ARCH'], os.environ['VSCMD_ARG_HOST_ARCH'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c493dc57cc7d859 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:426

        with open(sln_filename_tmp, 'w', encoding='utf-8-sig') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a9e5284c1ad2576 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:1008

        with open(ofname_tmp, 'w', encoding='utf-8') as of:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46bd6f2a94b91f79 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2010backend.py:2110

            with open(rulefile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6ec0e93ebd2474b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2017backend.py:44

        sdk_version = os.environ.get('WindowsSDKVersion', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1dcdf4b017a25463 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2019backend.py:39

        sdk_version = os.environ.get('WindowsSDKVersion', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c0117eb32025f10 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2022backend.py:39

        sdk_version = os.environ.get('WindowsSDKVersion', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72fbe8b51df2c031 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/vs2026backend.py:39

        sdk_version = os.environ.get('WindowsSDKVersion', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7da0cfa0e6c38169 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/backend/xcodebackend.py:274

        with open(tmpname, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfb62bbb3412cb9d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/build.py:3601

        with open(filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1211dbec9fd419fb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cargo/toml.py:41

            with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b94e5a5f7b82868c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/executor.py:216

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97ec3e807c403cfc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/fileapi.py:51

        query_file.write_text(json.dumps(query, indent=2), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2dcce288ad7e5aea — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/fileapi.py:75

        debug_json.write_text(json.dumps(index, indent=2), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00f000f3ec3218d3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/fileapi.py:320

        data = json.loads(real_path.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19b08c8b2db47a66 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/interpreter.py:884

            os_env = environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47fe32f8ab8af86d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/toolchain.py:61

        self.toolchain_file.write_text(self.generate(), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83f6db9af3317e93 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/toolchain.py:62

        self.cmcache_file.write_text(self.generate_cache(), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a77a1e32be22fa7a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/toolchain.py:238

        cmake_file.write_text(cmake_content, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70c5948ea63e09b6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/toolchain.py:242

        temp_toolchain_file.write_text(CMakeToolchain._print_vars(self.variables), encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a83a33ec60211e20 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmake/traceparser.py:170

            trace = self.trace_file_path.read_text(errors='ignore', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75a9bcc14fd543cd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmdline.py:93

    with open(filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c71b731d4d80d60a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/cmdline.py:112

    with open(filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59ca9ae5abbb8518 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/compilers.py:866

                with open(srcname, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #219185b9207bf0c8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/compilers.py:907

            os_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab8d990529962235 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/compilers.py:1277

        with open(os.path.join(work_dir, sourcename), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27f0de34e3057bec — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:308

            if 'WATCOM' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0ea9beaa5b32678 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:312

                watcom_cls = [sanitize(os.path.join(os.environ['WATCOM'], 'BINNT', 'cl')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a96b236749ea926e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:313

                              sanitize(os.path.join(os.environ['WATCOM'], 'BINNT', 'cl.exe')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04d3c8bcc4222a1d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:314

                              sanitize(os.path.join(os.environ['WATCOM'], 'BINNT64', 'cl')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a8f750727cd66cc — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:315

                              sanitize(os.path.join(os.environ['WATCOM'], 'BINNT64', 'cl.exe'))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37b89cc4ef48b317 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/detect.py:1355

            default_path = os.path.join(os.environ['ProgramFiles'], 'NASM')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43d088429f0d806b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/clike.py:228

                    with open(file_to_check, 'rb') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b161af3d5cbc417c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/clike.py:881

            with open(p.output_name, 'rb') as o:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5161872355b591ab — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/clike.py:1197

        os_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb982c585eee3b7e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/elbrus.py:42

        os_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86a227c71381e442 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/elbrus.py:53

        os_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8629eb747308f867 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/elbrus.py:65

        os_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a769dd9ae2e5e85 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/gnu.py:323

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb0e645e9cf3d3d8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/visualstudio.py:316

        if 'INCLUDE' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec37c3e6bcf5ed75 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/compilers/mixins/visualstudio.py:318

        return os.environ['INCLUDE'].split(os.pathsep)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf25e6446b54154b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/coredata.py:292

                    with open(f, encoding='utf-8') as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #531dd9c54d4e96d3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/coredata.py:293

                        with open(fcopy, 'w', encoding='utf-8') as wf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52cc9843e80cac3c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/coredata.py:303

                    os.environ.get('XDG_DATA_HOME', os.path.expanduser('~/.local/share')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6544b3d198e94d4a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/coredata.py:304

                ] + os.environ.get('XDG_DATA_DIRS', '/usr/local/share:/usr/share').split(':')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c4d99d94d45b05d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/coredata.py:489

    with open(tempfilename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72c58d35839491dc — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/blas_lapack.py:784

        deploy_target = os.environ.get('MACOSX_DEPLOYMENT_TARGET', macos_version)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c79344066a4c974f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/blas_lapack.py:800

        deploy_target = os.environ.get('IPHONEOS_DEPLOYMENT_TARGET', ios_version)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9de332b0cd18577b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/blas_lapack.py:939

        _m = os.environ.get('MKLROOT')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56720fb532d92427 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/boost.py:762

        raw = hfile.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d142796d0f29ab71 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cmake.py:298

        for i in os.environ.get('PATH', '').split(os.pathsep):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ea8e340c8412627 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cmake.py:329

        env_path = os.environ.get(f'{name}_DIR')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8187307579dabda1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cmake.py:580

        cmake_txt = importlib.resources.read_text('mesonbuild.dependencies.data', cmake_file, encoding = 'utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea34b9eb992b8078 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cmake.py:600

        cm_file.write_text(cmake_txt, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0276f531a5e6548 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:175

        env_vars = [var for var in env_vars if var in os.environ]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08aa681e707cb411 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:176

        user_defaults = {os.environ[var] for var in env_vars}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27bb246a394893ad — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:182

        return ([(os.environ[self.env_var], True)] if self.env_var else []) \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be1a3888feb46754 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:186

        env_vars = os.environ.keys()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c01f98b480a324e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:187

        return [(os.environ[var], False) for var in env_vars if var.startswith('CUDA_PATH_')]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce16485780ea075f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:223

            raw = i.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b72583a721371537 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/cuda.py:241

            with open(version_file_path, encoding='utf-8') as version_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffbdf1f08b38ecac — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/dev.py:777

        vsdir = os.environ.get('VSInstallDir')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c1643359abd1a27 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/hdf5.py:110

            os.environ[f'HDF5_{cenv}'] = join_args(compiler.get_exelist())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01fcd860085c1ab7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/hdf5.py:111

            os.environ[f'HDF5_{lenv}LINKER'] = join_args(compiler.get_linker_exelist())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b0677fd4a6f7094 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/hdf5.py:114

            del os.environ[f'HDF5_{cenv}']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02c3af8478838f8c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/hdf5.py:115

            del os.environ[f'HDF5_{lenv}LINKER']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #998e4334d801ee51 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/mpi.py:54

        tool_names = [os.environ.get(env_name) for env_name in env_vars]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea51a4c6664bba7c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/mpi.py:244

        incdir = os.environ.get('MSMPI_INC')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #699c98d0d8820884 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/mpi.py:248

            libdir = os.environ.get('MSMPI_LIB32')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c8b9951fc240a14 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/mpi.py:251

            libdir = os.environ.get('MSMPI_LIB64')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe8b35544fb07c7b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/mpi.py:278

        rootdir = os.environ.get('I_MPI_ROOT')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3de8f66204bd7ddc — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/pkgconfig.py:164

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bf78754d3d47625 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/pkgconfig.py:181

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49f2238d69df8c86 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/pkgconfig.py:302

        env = env or os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec64db9d7595cb17 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/pkgconfig.py:560

        with open(la_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88245eea3e3b80e5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/python.py:98

            self._data = json.loads(self._path.read_text(encoding='utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #603b99fcb6f9d702 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/python.py:229

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1636554455153768 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/scalapack.py:57

        _m = os.environ.get('MKLROOT')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #876c8d90ea6b7b37 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/ui.py:119

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87777fdf4f8d4a57 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/dependencies/ui.py:185

        self.vulkan_sdk = os.environ.get('VULKAN_SDK', os.environ.get('VK_SDK_PATH'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8175bd7c7f7852a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/envconfig.py:725

    return os.environ.get('MSYSTEM_CARCH', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c7c356b26c26f81 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/environment.py:70

        value = os.environ.get(var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c88456e100e73a25 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:385

        if 'MESON_UNIT_TEST' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97c8ded4b72ecbac — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:387

        if 'MESON_RUNNING_IN_PROJECT_TESTS' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a348732683094c33 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:967

        with open(meson_filename, "w", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #877f7751fb437ef4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:1250

                ver_data = Path(ifname).read_text(encoding='utf-8').split('\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a451ccaf4d3aa104 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:2814

                with open(dst_tmp, 'w', encoding=file_encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dcaea39395869f4b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreter.py:2821

                with open(depfile, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83087eca56546596 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreter/interpreterobjects.py:264

        child_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56cbb15472f2c5c2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106

            with open(fname, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afae8e6c37966dcf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155

                    with open(parent / 'meson.build', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1980290dc3f6d4d1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676

            with open(option_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93177933c2dfc8c5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/machinefile.py:30

                with open(fname, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46d04c049dd4be97 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mcompile.py:253

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39253890e19a0206 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mconf.py:95

                    with open(opfile, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4ecbc91732d1246 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mconf.py:110

                        with open(opfile, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6802368d76f0cb2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:72

    env = {} if dump_fmt else os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0620cf0b280a2e0e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:153

            gdbinit_path.write_text(gdbinit_line, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5431f5918839b54 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:199

            with open(options.dump, "w", encoding='utf-8') as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31de4c14dff78705 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:217

        if os.environ.get("MESON_DISABLE_PS1_OVERRIDE"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0043a327e9e7a519 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:219

        shell_env = os.environ.get("SHELL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b0e5a4632ec1c7b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:233

                args = [os.environ.get("COMSPEC", r"C:\WINDOWS\system32\cmd.exe")]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa1265c3df46612c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:236

            args = [os.environ.get("SHELL", os.path.realpath("/bin/sh"))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c2fd0e19147add8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdevenv.py:263

            with open(os.path.join(tmpdir.name, '.zshrc'), 'w') as zshrc: # pylint: disable=unspecified-encoding

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d32f470c69fbc89a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:68

    m.update(open(fname, 'rb').read())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47ff717c2187a189 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:69

    with open(hashname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f018a2c208f2341 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:96

            if 'GITLAB_CI' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32e7a2f620d621f6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:261

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #261d49e556865d41 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:294

            with lzma.open(xzname, 'wb') as xf, open(tarname, 'rb') as tf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4856deab3eaf8cca — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:299

            with bz2.open(bz2name, 'wb') as bf, open(tarname, 'rb') as tf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a08e2906b5f6a7f7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:304

            with gzip.open(gzname, 'wb') as zf, open(tarname, 'rb') as tf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a25b1251e118553c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mdist.py:324

    myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57b03f6d5afc28d6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesondata.py:21

            data = importlib.resources.read_text( # [ignore encoding] it's on the next lines, Mr. Lint
                    ('mesonbuild' / self.path.parent).as_posix().replace('/', '.'),
                    self.path.name,
                    encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c8452acb1fe60de — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesondata.py:25

            path.write_text(data, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d689cecd30ce2ca — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesonmain.py:33

        if os.environ.get('MESON_FORCE_BACKTRACE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #663b0b07f590f9c4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesonmain.py:43

        if os.environ.get('MESON_FORCE_BACKTRACE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8bc4d9d4bfa56a6f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesonmain.py:257

    if os.environ.get('MESON_SHOW_DEPRECATIONS'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da7575cde6bebde7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesonmain.py:264

    if sys.version_info >= (3, 10) and os.environ.get('MESON_RUNNING_IN_PROJECT_TESTS'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b09b8f95f2aef7e7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mesonmain.py:282

    if sys.platform == 'cygwin' and os.environ.get('MSYSTEM', '') not in ['MSYS', '']:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea957fc9f7f967a9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mformat.py:38

            self.read_string(f'[{self.default_section}]\n' + filename.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea7c94146f3108e2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mformat.py:1089

                code = src_file.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2a39b9d68b2754d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:545

            destdir = os.environ.get('DESTDIR')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09445b6c2c47e6ef — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:551

            os.environ['DESTDIR'] = destdir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4cb30ac80880043 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:581

                os.environ.get('MESON_ROOT_CMD')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5288a7df5a304309 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:587

            if rootcmd is None and pkexec is not None and 'PKEXEC_UID' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e3c6d1cc49fec20 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:814

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5e0c6710e1eb8e5 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:816

            if os.environ.get('SUDO_USER') is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea27c2d50698862f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:825

            elif os.environ.get('DOAS_USER') is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a7cc42228ad935a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/minstall.py:879

    with open(os.path.join(log_dir, 'install-log.txt'), 'w', encoding='utf-8') as lf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11c838944ce3e8a9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mintro.py:511

    with open(get_info_file(infodir, kind), encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22a7af1ffac01d64 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mintro.py:580

        with open(tmp_file, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9950341a9391e40 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mintro.py:650

    with open(tmp_file, 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18f093c2508dd986 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:50

    return bool(kernel.SetConsoleMode(stdout, mode.value | 0x4) or os.environ.get('ANSICON'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #304cd8d30c21eb12 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:52

_in_ci = 'CI' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1e8731cbb040c76 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:53

_ci_is_github = 'GITHUB_ACTIONS' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdb78a19a69c67c1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:128

        if 'PAGER' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7ddffee3614f07c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:129

            pager_cmd = shlex.split(os.environ['PAGER'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d5f566e983ac3ce — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:148

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1114887013bbdea4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:158

            if 'PAGER' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55f2eaeb88e07f85 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:174

        self.log_file = open(os.path.join(logdir, self._LOG_FNAME), 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e909d8d4fb0ddaab — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:175

        self.slog_file = open(os.path.join(logdir, self._SLOG_FNAME), 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90488c4ff03b1c68 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:406

                _colorize_console = os.isatty(output.fileno()) and os.environ.get('TERM', 'dumb') != 'dumb'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8067c20a771d9fc4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:582

    elif 'MESON_FORCE_SHOW_LOGS' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e4596bfc4a83e82 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mlog.py:589

    with open(fname, 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64b9b853f69ae93a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/_qt.py:817

        with open(fileout_abs, 'w', encoding='utf-8') as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef95a7e43b0dceed — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/cmake.py:338

            with open(infile, encoding='utf-8') as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ebd0f7dffd21b13 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/cmake.py:352

        with open(outfile_tmp, "w", encoding='utf-8') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3f9c7cf06c9fe30 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/dlang.py:74

            with open(config_path, encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f0febdfba9c0309 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/dlang.py:115

        with open(config_path, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5623314cb98f940b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/external_project.py:155

        self.run_env: EnvironOrDict = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #119cfefc1a26dac3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/external_project.py:220

            output = open(logfile, 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c471660f0c0ea96 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/features/module.py:680

        with open(config_path, "w", encoding='utf-8') as cout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88a6b41867388ed8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/fs.py:169

        with open(file, mode='rb', buffering=0) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20d6fd79628110ac — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/fs.py:268

            with open(path, encoding=encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56ab9e5741b7ac70 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/gnome.py:950

        with open(gir_filelist_filename, 'w', encoding='utf-8') as gir_filelist:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf1a6314b9dafa33 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/gnome.py:2212

        with open(fname, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8fa2d52d1e76c78 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/hotdoc.py:293

        with open(hotdoc_config_path, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9d342ea009d15ec — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/i18n.py:238

        rsp_file.write_text(source_list, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa0303042170bc48 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/keyval.py:31

            with open(path_to_config, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b424e9a78cdecf92 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/pkgconfig.py:555

        with open(fname, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #edc138e04ef20b77 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/python.py:431

        with open(pycompile, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5556d693910f0f0e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/python.py:442

                with open(os.path.join(self.interpreter.environment.get_scratch_dir(), manifest), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83d3e4a8e5fcecfb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/modules/snippets.py:100

        header_path.write_text(content, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58ce78899ed90c7c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mparser.py:113

        self.in_unit_test = 'MESON_RUNNING_IN_PROJECT_TESTS' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbf8c7df873d907e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/msetup.py:152

        with open(os.path.join(build_dir, '.gitignore'), 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47895cf2678904b4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/msetup.py:154

        with open(os.path.join(build_dir, '.hgignore'), 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed712b0526ff3a2f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/msetup.py:324

                with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8575d0f17d6d9c97 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:527

        self.file = open(filename, 'w', encoding='utf-8', errors=errors)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9a0d99315cb149e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:762

        inherit_env = env_tuple_to_str(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea7c5912e58ec3fb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:956

        with open(self.filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41fb4528b33fad39 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:1057

        test_only_env = set(self.env.items()) - set(os.environ.items())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6640ca450a974942 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:1121

            with open(filename, 'r', encoding='utf8', errors='replace') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c769202a5381524b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:1794

        return current.env.get_env(os.environ.copy())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40e0eccf64b46a6d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:1802

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #617a681af0538ef2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:2237

        with open(targets_file, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72d5b00660bc7f71 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/mtest.py:2319

            if os.environ.get('MESON_FORCE_BACKTRACE'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ff7ed7da59b57ca — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/optinterpreter.py:83

            with open(option_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdff00b33572ce17 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/programs.py:185

        if 'USERPROFILE' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #025f6979623a913e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/programs.py:196

        appstore_dir = Path(os.environ['USERPROFILE']) / 'AppData' / 'Local' / 'Microsoft' / 'WindowsApps'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44028939caa3b052 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/programs.py:228

            with open(script, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ce78836f4f8c085 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/programs.py:332

        search_dirs = OrderedSet(self._windows_sanitize_path(os.environ.get('PATH', '')).split(';'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50445cda8fe0b3fd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/programs.py:354

        path = os.environ.get('PATH', os.defpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e586a36817d8d745 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/rewriter.py:1022

                with open(fpath, 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2da52524111125fe — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/rewriter.py:1024

            with open(fpath, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #666386ff8eb5148c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/rewriter.py:1075

            with open(val['path'], 'w', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ff427aaf0a92bda — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/rewriter.py:1144

        with open(options.json, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #9a9b4b771efdf540 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/clangformat.py:26

            original = fname.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #9d0e8b22bfe01037 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/cleantrees.py:30

    with open(args[0], 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8d2e1dd109dbe4a5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/coverage.py:103

                    with open(llvm_cov_shim_path, 'w', encoding='utf-8') as llvm_cov_bat:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e594ae58fa9bf7df — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/coverage.py:107

                    with open(llvm_cov_shim_path, 'w', encoding='utf-8') as llvm_cov_sh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #9c6e0bdec555310e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depaccumulate.py:105

    with open(outfile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #92b14cdb17dc910d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depaccumulate.py:119

    with open(jsonfile, 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #adbbfd2aa52bb205 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depaccumulate.py:125

        with open(dep, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #89d05eb919b486cb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depfixer.py:159

            self.bf = open(bfile, 'r+b')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #bd24f5cf1069928a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depfixer.py:164

                self.bf = open(bfile, 'r+b')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #02f8ccbfe895a503 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depfixer.py:523

    with open('META-INF/MANIFEST.MF', 'r+', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1ec9fc34ab32a817 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depscan.py:72

        with open(pickle_file, 'rb') as pf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b27e97fb602662a1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depscan.py:90

        for line in fpath.read_text(encoding='utf-8-sig', errors='ignore').split('\n'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ce7f762b74de0e48 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depscan.py:134

        for line in fpath.read_text(encoding='utf-8-sig', errors='ignore').split('\n'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b0d6f416b103d7be — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/depscan.py:199

        with open(self.outfile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e2cc5d3897049738 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:100

    cppflags = shlex.split(os.environ.get('CPPFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #3a1a3526ae82dcf2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:101

    cflags = shlex.split(os.environ.get('CFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b5cae65b653dc604 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:102

    cxxflags = shlex.split(os.environ.get('CXXFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #871ca20fe4c52bc1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:103

    objcflags = shlex.split(os.environ.get('OBJCFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #644ad908570a729a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:104

    objcxxflags = shlex.split(os.environ.get('OBJCXXFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b8ed7ab5b711753a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:105

    ldflags = shlex.split(os.environ.get('LDFLAGS', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0c1afef21d5203cc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:278

    with open(tmpfilename, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #19c700c85488c94c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:329

        compile_args = shlex.split(os.environ.get(compilers.CFLAGS_MAPPING[langname] + envvar_suffix, ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f7b181ff208d1467 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:331

        cppflags = tuple(shlex.split(os.environ.get('CPPFLAGS' + envvar_suffix, '')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b417285a0dd1cb7f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:337

        lang_link_args += shlex.split(os.environ.get('LDFLAGS' + envvar_suffix, ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a4dfa63c4d33f1dd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:345

            compilerstr = os.environ.get(envvarname + envvar_suffix)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0ee6dc2c876ab7b3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:365

            binstr = os.environ.get(envvar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #961b3cce30a6d6cc — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:371

    var = os.environ.get('PKG_CONFIG_LIBDIR' + envvar_suffix)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #45137a76ea30f2e7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:374

    var = os.environ.get('PKG_CONFIG_SYSROOT_DIR' + envvar_suffix)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #57e5966c438c9f44 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/env2mfile.py:523

            with open(pathlib.Path(self.options.outfile) / crossfile_name, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #965cb90a50ebf65b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/externalproject.py:28

        with open(self.depfile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d35a81b0a57576b3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/externalproject.py:39

        with open(self.stampfile, 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #cda4c18ef139427c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/externalproject.py:74

            output = open(logfile, 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #19de25b29c8815bb — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/externalproject.py:79

        run_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #4dcab0654c567425 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gettext.py:30

        with open(linguas, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7f5f8ecd144b977c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gettext.py:48

    child_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d0cb8da02b1b77e4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gtkdochelper.py:52

    env = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #77b680e2b3297df1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gtkdochelper.py:270

    if 'MESON_INSTALL_PREFIX' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8c19e37d5c1f245f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gtkdochelper.py:271

        destdir = os.environ.get('DESTDIR', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c0a5621226b2bc2a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/gtkdochelper.py:272

        install_prefix = destdir_join(destdir, os.environ['MESON_INSTALL_PREFIX'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #feb298f0855c073e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/hotdochelper.py:23

    subenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fa855c05c2d63007 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/hotdochelper.py:35

        destdir = os.environ.get('DESTDIR', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #227cd5faf22bdaf7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/itstool.py:64

    build_dir = os.environ.get('MESON_BUILD_ROOT', os.getcwd())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6cbe7e0549a97ba9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/meson_exe.py:31

    child_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a9f20f39aaff7678 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/meson_exe.py:49

        stdin = open(exe.feed, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fee29e31621112f0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/meson_exe.py:84

            with open(exe.capture, 'rb') as cur:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #129d2d9189c9476a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/meson_exe.py:89

            with open(exe.capture, 'wb') as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #13f727f358c1b99f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/meson_exe.py:106

        with open(options.unpickle, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #73cb1937de9dbc21 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/msgfmthelper.py:25

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d7b0d6d3c14addea — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pickle_env.py:6

    with open(args[0], "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0eb2028d4a81ca89 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pickle_env.py:7

        pickle.dump(dict(os.environ), f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #24172c0b6629e287 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pycompile.py:12

quiet = int(os.environ.get('MESON_INSTALL_QUIET', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2160d8ba0dd0475d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pycompile.py:22

        fullpath = absf = os.environ['MESON_INSTALL_DESTDIR_'+key] + f

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d85653f4d51b3307 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pycompile.py:23

        f = os.environ['MESON_INSTALL_'+key] + f

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8944a2d1ba25b5f9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/pycompile.py:41

    with open(data_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #46731916bff142c0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/regen_checker.py:41

    with open(dumpfile, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #dd5c184caf0a50c9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/regen_checker.py:44

    with open(coredata_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #aacbaebf25d215cd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/reprotest.py:61

        os.environ['CCACHE_DISABLE'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b098b9a449663cc7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/run_tool.py:136

    with open('meson-info/intro-targets.json', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6375819f2758a12e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/run_tool.py:156

    with open('meson-info/intro-targets.json', encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #66810674f5910172 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/rustdoc.py:57

                environ = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b803989d06e4f503 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:31

    with open(outfilename, 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #edf96ef0a454c9ff — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:36

        with open(outfilename, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0c74e1c2fd6b97d8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:42

    with open(outfilename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1a1fcfe32d42a23b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:53

    with open(TOOL_WARNING_FILE, 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #459e507c8a28cd80 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:58

    if evar in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #4cfa19497e9141c7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:60

        return shlex.split(os.environ[evar])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #366db1cff8a4a275 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:118

    origpath = os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e039cd3d86bc6a3c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:120

        os.environ['PATH'] = '/usr/gnu/bin:' + origpath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #290d8476499a4a01 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:123

        os.environ['PATH'] = origpath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #589f4c5e9380424d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:228

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #812a7ea9bbc5238f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/symbolextractor.py:333

            with open(TOOL_WARNING_FILE, 'w', encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6ef262c54bc0cf9e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/uninstall.py:14

    for line in open(log, encoding='utf-8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f8fe9ac69143690b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/vcstagger.py:16

    with open(infile, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #3698e30216e441ef — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/vcstagger.py:19

        with open(outfile, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e3081b5221ea1290 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/vcstagger.py:24

        with open(outfile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a52a6fc4cfdf2f59 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/scripts/yasm.py:21

    with open(options.depfile, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a9b8238b864f08d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:96

            with open(self.source_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5f7475c71628d6f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:100

            with open('meson.build', 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8188ad53865eb2d0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:128

            with open(self.source_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de39ed6b5a5ff25b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:131

            with open(test_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c992e8804340669 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:134

            with open('meson.build', 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5d14f7f99eff876 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:148

            with open(self.source_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab2aae8dafa56a90 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:151

            with open('meson.build', 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c29af39a3d990575 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:188

            with open(self.source_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fea3ad326fe237a9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:191

            with open(test_name, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fb203dd0460cc00 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:194

            with open('meson.build', 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f61d0dcce9fe4c3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/templates/sampleimpl.py:219

            with open(kwargs['header_file'], 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed89e19fb8762ac4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/tooldetect.py:106

    env_ninja = os.environ.get('NINJA', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dea6385e62c620a6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/tooldetect.py:193

    if 'SCANBUILD' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4522335d4247e2f1 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/tooldetect.py:194

        exelist = split_args(os.environ['SCANBUILD'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f44a551ec25b2e11 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/platform.py:49

                self.lockfile = open(self.lockpath, 'w+', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f34fea68f4bf2f0b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/platform.py:98

                self.lockfile = open(self.lockpath, 'w+', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1dccb684576a75af — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:247

    if 'MESON_COMMAND_TESTS' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0099f4fe304042a3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:752

    arch = os.environ.get('PROCESSOR_ARCHITEW6432', '').lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52b92fb99e5d598e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:756

            arch = os.environ['PROCESSOR_ARCHITECTURE'].lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75425419ddd45067 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:836

    vsver = os.environ.get('VSCMD_VER', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7cd7c992b3f6ae6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1124

        if varname in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67aed691d67b46b3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1126

                num_workers = int(os.environ[varname])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #929d8e0f2276b7dc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1543

        with open(src, encoding=encoding, newline='') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70a6771c8191ca6e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1551

        with open(dst_tmp, 'w', encoding=encoding, newline='') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a0fa5c4eb186576 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1612

    with open(ofilename_tmp, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff7aa8d9500a0f09 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1627

        with open(dst, 'rb') as f1, open(dst_tmp, 'rb') as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #345191bd87a8d6c8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:1717

            with open(args_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b75f1593c20f567 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:2429

        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b26ccf12db73aa5d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/universal.py:2490

    return int(os.environ.get('MESON_RSP_THRESHOLD', limit))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01c16d840e4b158e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:31

    if os.environ.get('OSTYPE') == 'cygwin':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27b97d9930c1ab15 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:33

    if 'MESON_FORCE_VSENV_FOR_UNITTEST' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91ec011bbdd71875 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:36

        if 'VSINSTALLDIR' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd3a6c5f1ce2e5b2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:51

    root = os.environ.get("ProgramFiles(x86)") or os.environ.get("ProgramFiles")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #299298f2d7736d22 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:98

        with open(env_file.name, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8bf5ed4a587a1bf — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/utils/vsenv.py:101

            os.environ[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #158898d49b591345 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:121

        return T.cast('http.client.HTTPResponse', urllib.request.urlopen(req, timeout=REQ_TIMEOUT, context=ssl_truststore()))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #1676dbb97cd1b2f8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:172

    with open(wrapfile, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b9d0f286dc1d0b5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:285

        with open(filename, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #508ff9763bc63c59 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:344

            with open(self.get_hashfile(subproject_directory), 'w', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #583201eee3715a2d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:378

        self.cachedir = os.environ.get('MESON_PACKAGE_CACHE_DIR') or os.path.join(self.subdir_root, 'packagecache')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed56997b1d92fbf9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:539

                with open(main_fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #283f36a1cf85d020 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:730

            with open(hashfile, 'r', encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #1563ef45af6d4b32 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:822

                resp = urllib.request.urlopen(req, timeout=REQ_TIMEOUT, context=ssl_truststore())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #c70b84a610c96b51 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wrap.py:861

        with open(path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bb401902faf4572 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wraptool.py:102

    with open(wrapfile, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8973bb8ffc6b6ef4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/wrap/wraptool.py:207

    with open(os.path.join(subproject_dir_name, 'wrapdb.json'), 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fac051c156cdd1b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/createmsi.py:234

        with open(self.main_xml, 'w') as open_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5df1d68fd2e49630 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/createmsi.py:237

        with open(self.main_xml) as open_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9585a8cf92b8e20 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/createmsi.py:240

        with open(self.main_xml, 'w') as open_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcbb8884d4671a0d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/createpkg.py:94

        with open(self.distribution_file, 'w') as open_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6eaefdcbb9f10a89 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/mpackage.py:42

version_lines = pathlib.Path(relfile).read_text().split('\n')[:-1]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb06836936a46a14 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/mpackage.py:59

    myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #680e2070da286cc4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/packaging/mpackage.py:62

    pathlib.Path(relfile).write_text('\n'.join(version_lines) + '\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #54054122a06c078e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_cross_test.py:40

        data = json.loads(cf_path.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #96dcb053afc4b7f6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_cross_test.py:43

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0052a2dfdbb853e6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_format_tests.py:19

    lines = file.read_bytes().split(b'\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa8e90601e0cc719 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:62

        self.orig_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #595b78f027b35da9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:64

        os.environ['MESON_COMMAND_TESTS'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b97587da0c9a5c6d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:75

        os.environ.clear()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #337d0bc45e44a137 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:76

        os.environ.update(self.orig_env)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a083c5d49f95cae — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:133

        os.environ['PATH'] = str(bindir) + os.pathsep + os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7f0618a80cf5482 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:151

        os.environ['PYTHONPATH'] = os.path.join(str(pylibdir), '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88cb9a666d737789 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:152

        os.environ['PATH'] = str(bindir) + os.pathsep + os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80c956a293667762 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:163

            os.environ['PYTHONPATH'] = os.pathsep.join(PYTHONPATHS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06c09adc62893393 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:196

        wrapper.write_text('#!/bin/sh\n\nmeson.real "$@"', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3084a5a0abc6cad9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:219

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8d5b99a41be6e0f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_meson_command_tests.py:221

        with open(script_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcee6450288b9a53 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_mypy.py:170

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3dc9e79a4d3f9320 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:278

        self.env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c49c127d4decccf6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:310

print_debug = 'MESON_PRINT_TEST_OUTPUT' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5916861cc2764a5d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:311

under_ci = 'CI' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #210fba849a1ec37d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:312

raw_ci_jobname = os.environ.get('MESON_CI_JOBNAME', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #768f64acdd19e57f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:826

            if skip_env_var in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2f232d91a931a5a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:837

        test_def = json.loads(test_def_file.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #712bedf015ac1b95 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:1042

    skip_cmake = ((os.environ.get('compiler') == 'msvc2015' and under_ci) or

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b034f0cf4881068 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:1099

    with open(txtname, 'w', encoding='utf-8', errors='ignore') as lf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4950358085a9af2a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:1636

    if 'VSCMD_VER' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #297675b6c66d3183 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_project_tests.py:1637

        print('VSCMD version', os.environ['VSCMD_VER'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bd17a818a421fe3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:52

    NINJA_1_12_OR_NEWER = bool(int(os.environ['NINJA_1_12_OR_NEWER']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf076386ef2d5f4f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:53

    NINJA_CMD = [os.environ['NINJA']]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2715652c21bf102 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:63

    os.environ['NINJA_1_12_OR_NEWER'] = str(int(NINJA_1_12_OR_NEWER))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91e57faa73528289 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:64

    os.environ['NINJA'] = NINJA_CMD[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ce0f0f875d69baa — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:72

os.environ['PYTHONWARNDEFAULTENCODING'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0898a4d7041390bc — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:74

os.environ['MESON_RUNNING_IN_PROJECT_TESTS'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66f7843447da68cd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:118

    if not os.environ.get('MKLROOT', '').strip():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62070858523d4f16 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:120

    if (os.environ.get('CC') == 'icl' or

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #187df8a5f7ae3d77 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:121

            os.environ.get('CXX') == 'icl' or

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28b2a913aa584b7b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:122

            os.environ.get('FC') == 'ifort'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cacea4a5bd5326c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:131

                 'Please try using the Intel shell.'.format(os.environ.get('MKLROOT')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10012320275f982a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:173

if 'MESON_EXE' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f83082856156264 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:174

    meson_exe = mesonlib.split_args(os.environ['MESON_EXE'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6860816f95de9adf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:233

            with open(f, encoding='utf-8') as o:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb4f9ed358ce0bdb — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:301

    with mock.patch.dict(os.environ, env or {}), mock.patch.object(sys, 'stdout', stdout), mock.patch.object(sys, 'stderr', stderr):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41f63c9dc039a995 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:352

    if not mesonlib.is_windows() and not mesonlib.is_haiku() and 'CI' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b62debd005742fe2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:366

    if 'APPVEYOR' in os.environ and os.environ['arch'] == 'x86':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63578c30f6d71312 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:367

        os.environ.pop('platform')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29b94fc33c584df0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_tests.py:370

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9019140407ee7cd7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_unittests.py:69

    os.environ['MESON_UNIT_TEST_BACKEND'] = be

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a89bb56baf13e80 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/run_unittests.py:113

        if 'CI' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb9489cd17064a22 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/skip_ci.py:13

    if is_pr_env not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e405375b6837fa0b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/skip_ci.py:16

    elif os.environ[is_pr_env] == 'false':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e08d214a675326f7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/skip_ci.py:22

    if base_env not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a3259dc2f373329 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/skip_ci.py:25

    return os.environ[base_env]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e343c1c67ec9dcfd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/cmake/11 cmake_module_path/subprojects/cmMod/gen.py:1

with open('main.c', 'w') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7f0db3c360ba6f0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/100 postconf with args/postconf.py:12

input_file = os.path.join(os.environ['MESON_SOURCE_ROOT'], 'raw.dat')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7e8d3431db237cf — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/100 postconf with args/postconf.py:13

output_file = os.path.join(os.environ['MESON_BUILD_ROOT'], 'generated.h')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #762b24cb093b9623 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/100 postconf with args/postconf.py:15

with open(input_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24d3d74e45168faf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/100 postconf with args/postconf.py:17

with open(output_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3f48e06980ec69d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8

with open(output, 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46d9dcd8dda5c1a8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:11

        with open(i) as ifile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3ebfe5120d6dc90 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/gen-resx.py:8

with open(ofile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f46f231321eb0640 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/gen.py:8

with open(ifile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f26fb489252778b1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/gen.py:12

with open(ofile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aab56f73d291ba14 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/109 custom target capture/my_compiler.py:9

    with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a5d866a6d577692 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/110 allgenerate/converter.py:8

open(ofile, 'w').write(open(ifile).read())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee61032a540cc33f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/123 custom target directory install/docgen.py:14

    with open(os.path.join(out, name + '.html'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8426add6859acf6e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/125 configure file in generator/src/gen.py:8

with open(ifile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40b80fac181f8606 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/125 configure file in generator/src/gen.py:12

with open(ofile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c439b0b1b675f22 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/128 build by default targets in tests/write_file.py:5

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff370693142d8ee9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5

ifile = open(sys.argv[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0af49d5bf646141e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6

ofile = open(sys.argv[2], 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59a8200cf3464dc4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/13 pch/generated/gen_custom.py:4

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a693bc7c9e454df3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/13 pch/generated/gen_generator.py:4

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d3a67fe8b4b5a7b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/13 pch/generated/gen_generator.py:6

with open(sys.argv[2], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e892f7dc88d0542f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_env.py:12

if 'MESONINTROSPECT' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe073ce2da03eec4 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_env.py:15

mesonintrospect = os.environ['MESONINTROSPECT']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f94152e7cf18db96 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_introspection.py:8

if 'MESONINTROSPECT' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7eb6d911f0b6b05f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_introspection.py:10

if 'MESON_BUILD_ROOT' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2092b4ecc74209a3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_introspection.py:13

mesonintrospect = os.environ['MESONINTROSPECT']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7171e3ab2a22bc8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/139 mesonintrospect from scripts/check_introspection.py:16

buildroot = os.environ['MESON_BUILD_ROOT']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6045c136a69afd0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/file_contains.py:14

    with open(args.file[0], encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc63805d4f0b3cc3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator-deps.py:9

build_dir = Path(os.environ['MESON_BUILD_ROOT'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d0219c00c381bb6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator-deps.py:10

subdir = Path(os.environ['MESON_SUBDIR'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #099272fa3c1472e6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator-without-input-file.py:9

build_dir = Path(os.environ['MESON_BUILD_ROOT'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1a056f6108e97f3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator-without-input-file.py:10

subdir = Path(os.environ['MESON_SUBDIR'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #454da29227ac78d6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator.py:9

build_dir = Path(os.environ['MESON_BUILD_ROOT'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7863c20d1effd2b6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/14 configure file/generator.py:10

subdir = Path(os.environ['MESON_SUBDIR'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6c3b4676542d3d1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/140 custom target multiple outputs/generator.py:11

with open(os.path.join(odir, name + '.h'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbe1d7b960cea0c7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/140 custom target multiple outputs/generator.py:13

with open(os.path.join(odir, name + '.sh'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5ad1cc54ae8198b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/141 special characters/check_quoting.py:27

    with open(output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af29e0430cf3938a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/144 link depends custom target/make_file.py:4

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7eeca778cbea5946 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/152 index customtarget/gen_sources.py:30

    with open(args.header, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d84209bb0e73199 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/152 index customtarget/gen_sources.py:33

    with open(args.code, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81b90b122def29a9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/168 preserve gendir/genprog.py:41

    proto_name = open(ifile_name).readline().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87dfb86ccbf3260d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/168 preserve gendir/genprog.py:45

    open(h_out, 'w').write(h_templ % (proto_name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1436a7ebb2a54e92 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/168 preserve gendir/genprog.py:46

    open(c_out, 'w').write(c_templ % (proto_name, proto_name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e7dcf462928134b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/169 source in dep/generated/genheader.py:15

funname = open(ifile).readline().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d26d5f2d530d865f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/169 source in dep/generated/genheader.py:17

open(ofile, 'w').write(templ % funname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0122b63341242ae — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/170 generator link whole/generator.py:14

    with open(hname, 'w') as hfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c5f5acf33531066 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/170 generator link whole/generator.py:20

    with open(cname, 'w') as cfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b9ae5e949f3a7f7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/178 bothlibraries/dummy.py:7

    Path(sys.argv[1]).write_text('Hello World\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #071bcda9e126f8b0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/179 escape and unicode/file.py:6

with open(sys.argv[1]) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc53e00d23971970 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/179 escape and unicode/file.py:9

with open(os.path.join(sys.argv[3]), 'w', errors='replace') as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cd8e96addf03221 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/182 find override/subdir/converter.py:13

d = pathlib.Path(ifilename).read_text().split('\n')[0].strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b161bbeee361492a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/182 find override/subdir/converter.py:15

pathlib.Path(ofilename).write_text(ftempl % d)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0d2a683c9896c39 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/186 test depends/gen.py:7

    with open(sys.argv[1], 'w') as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd025134b4d3c97e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/195 generator in subdir/com/mesonbuild/tooldir/genprog.py:41

    proto_name = open(ifile_name).readline().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93560b39c59d5ad4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/195 generator in subdir/com/mesonbuild/tooldir/genprog.py:45

    open(h_out, 'w').write(h_templ % (proto_name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3b9f9888d6cfd12 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/195 generator in subdir/com/mesonbuild/tooldir/genprog.py:46

    open(c_out, 'w').write(c_templ % (proto_name, proto_name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3dd9e9ef34b675a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/202 custom target build by default/docgen.py:11

    with open(os.path.join(out, name + '.txt'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de2e573be8d86860 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/208 link custom/custom_stlib.py:73

    c_file.write_text(contents)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #970a1068d4d47705 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/209 link custom_i single from multiple/generate_conflicting_stlibs.py:70

        c_file.write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03d0f6c81cf64cfe — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/210 link custom_i multiple from multiple/generate_stlibs.py:72

        c_file.write_text(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04eb62a522d43c11 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/216 custom target input extracted objects/check_object.py:16

    with open(sys.argv[2], 'wb') as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3820b5d55d8fdc86 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/216 custom target input extracted objects/libdir/gen.py:3

with open(sys.argv[1], 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb255e8b4dc6bf18 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/22 object extraction/check-obj.py:12

    with open('compile_commands.json') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e72f06e73b81d176 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/226 link depends indexed custom target/check_arch.py:12

with open(dummy_output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5ca769a55474b75 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/226 link depends indexed custom target/make_file.py:4

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db0468087e91cfc9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/226 link depends indexed custom target/make_file.py:7

with open(sys.argv[2], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbc64ad087fbdc0e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/227 very long command line/codegen.py:6

Path(sys.argv[2]).write_text(
    'int func{n}(void) {{ return {n}; }}'.format(n=sys.argv[1]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fa934b5e9b03893 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2

with open('x.c', 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d01d97c670c89a3e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4

with open('y', 'w'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4b6f5f48e81b2c3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/242 custom target feed/my_compiler.py:13

    with open(sys.argv[1], 'w+') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f8ac3b60c55fdfd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5

assert(Path(sys.argv[1]).read_text() == 'stage1\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0d135857c086a6b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6

Path(sys.argv[2]).write_text('stage2\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c69f01518fadc41 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5

assert(Path(sys.argv[1]).read_text() == 'stage2\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75d3fa57e86f1b65 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6

Path(sys.argv[2]).write_text('int main(void){}\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21498478eaf2abc5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/269 configure file output format/compare.py:3

with open(sys.argv[1], 'r', encoding='utf-8') as f, open(sys.argv[2], 'r', encoding='utf-8') as g:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92d2bdb5ed4e7e8e — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/271 env in generator.process/generate_main.py:5

ENV_VAR_VALUE = os.environ.get('ENV_VAR_VALUE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22b880c930aa009d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/271 env in generator.process/generate_main.py:8

with open(sys.argv[1], 'r') as infile, \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90ca635274cb62fe — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/271 env in generator.process/generate_main.py:9

     open(sys.argv[2], 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec706a53137cf207 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/274 customtarget exe for test/generate.py:12

    with open(a, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c884b9edda5b321 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/275 environment/testenv.py:9

if os.environ.get(key) == expected:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f2f4f1c220ef9bd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/275 environment/testenv.py:12

sys.exit(f'Expected {expected!r}, was {os.environ.get(key)!r}')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a28f3bbd07853c9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/33 run program/check-env.py:5

assert os.environ['MY_PATH'] == os.pathsep.join(['0', '1', '2'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60990351fb97618c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/41 test args/tester.py:6

assert os.environ['MESONTESTING'] == 'picklerror'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3066b292a9adcb62 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/41 test args/tester.py:7

assert os.environ['TEST_LIST_FLATTENING'] == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10074412dc35de76 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/41 test args/tester.py:9

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f27b6a0faf88e09 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/49 custom target/depfile/dep.py:12

with open(output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ea490e3e2511410 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/49 custom target/depfile/dep.py:14

with open(depfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e976f0a54b05dfa — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/49 custom target/my_compiler.py:11

    assert os.environ['MY_COMPILER_ENV'] == 'value'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd31614eb897f591 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/49 custom target/my_compiler.py:16

    with open(args[1].split('=', 1)[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bab46225143ec22 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/49 custom target/my_compiler.py:21

    with open(args[2].split('=', 1)[1], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37aeb21702810a10 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/my_compiler.py:9

    with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #387f38c49e4f13ac — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/my_compiler.py:14

    with open(sys.argv[2], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e4263ae0da3c74d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/my_compiler2.py:9

    with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58ce6da997ba0733 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/my_compiler2.py:14

    with open(sys.argv[2], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47d2fd5cb8ed077c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/usetarget/subcomp.py:5

with open(sys.argv[1], 'rb') as ifile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b197312b5b159621 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/50 custom target chain/usetarget/subcomp.py:6

    with open(sys.argv[2], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #988dd8e42cc2147f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:6

assert 'MESON_SOURCE_ROOT' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efa71912a8533a0d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:7

assert 'MESON_BUILD_ROOT' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #397de84eb4e9fc13 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:8

assert 'MESON_SUBDIR' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0d7d23791c3963b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:9

assert 'MESONINTROSPECT' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc0221b3e46b3435 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:10

assert 'MY_ENV' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b8ca515e0c83203 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:15

env_source_root = Path(os.environ['MESON_SOURCE_ROOT']).resolve()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #304858635f266303 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:16

env_build_root = Path(os.environ['MESON_BUILD_ROOT']).resolve()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #238016a6622ea863 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/check-env.py:17

env_current_source_dir = Path(env_source_root, os.environ['MESON_SUBDIR']).resolve()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5cc6857fe231e69 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/converter.py:5

with open(sys.argv[1], 'rb') as ifile, open(sys.argv[2], 'wb') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13c03b28987f214f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/51 run target/fakeburner.py:9

    with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cb5fabd50d8f33a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/customtarget.py:12

    with open(os.path.join(args.dirname, '1.txt'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e87a25116f10841 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/customtarget.py:14

    with open(os.path.join(args.dirname, '2.txt'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ded968a981463325 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/myinstall.py:7

prefix = os.environ['MESON_INSTALL_DESTDIR_PREFIX']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #328e4a6f62add81b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/myinstall.py:8

dry_run = bool(os.environ.get('MESON_INSTALL_DRY_RUN'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65b4ae78c1cbba99 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/myinstall.py:30

                with open(os.path.join(dirname, name), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f7bb41e74d8a22f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/src/myinstall.py:6

prefix = os.environ['MESON_INSTALL_DESTDIR_PREFIX']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8c49b3b246d6bbc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/53 install script/src/myinstall.py:13

with open(os.path.join(dirname, sys.argv[2] + '.in'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f85c0d95883c92f0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/54 custom target source output/generator.py:10

with open(os.path.join(odir, 'mylib.h'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce212b354019088b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/54 custom target source output/generator.py:12

with open(os.path.join(odir, 'mylib.c'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fde2a6804953530d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/57 custom header generator/makeheader.py:9

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c82a13ba71a5c2cd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/57 custom header generator/makeheader.py:11

with open(sys.argv[2], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #637d63f07cda6a7d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/58 multiple generators/mygen.py:9

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0a54c3bbfa4e3a4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/58 multiple generators/mygen.py:16

with open(outhdr, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21b6a609c7c5b3ef — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/58 multiple generators/mygen.py:18

with open(outsrc, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae0b45a7ee8b2554 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/65 build always/version_gen.py:13

    with open(infile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d3fbdfc3ebbd629 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/65 build always/version_gen.py:16

        with open(outfile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ced35f21cf9e43e3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/65 build always/version_gen.py:22

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b58157486321f8d5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/69 configure file in custom target/src/mycompiler.py:5

with open(sys.argv[1]) as ifile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8d079cc46816534 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/69 configure file in custom target/src/mycompiler.py:8

with open(sys.argv[2], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2e0f4f22161a898 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4872d112bfe5b84c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:11

with open(sys.argv[2], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c980c19d10ada54c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9

with open(files[0]) as ifile, open(sys.argv[2], 'w') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bb335bf4b520942 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/8 install/gendir.py:8

open(fname, 'w').close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #effceb82bbb03713 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/86 private include/stlib/compiler.py:29

with open(cfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9624274ee268d413 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/86 private include/stlib/compiler.py:31

with open(hfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fbfbac76c3f7f38 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/88 dep fallback/subprojects/boblib/genbob.py:5

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99d4da1ef087c3ec — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen.py:21

with open(options.input) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac81a6d438df6e98 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen.py:26

with open(options.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fcebab9d0bdf232 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen2.py:17

with open(options.input) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2166a1590ee049f0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen2.py:22

with open(output_c, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c182b664b8582af2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen2.py:31

with open(output_h, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d046cdb2eb30ac0b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/90 gen extra/srcgen3.py:12

with open(options.input) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #490636250d9eb70e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/92 test workdir/subdir/checker.py:5

data = open(sys.argv[1], 'rb').read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #743ec3f29b31f9b1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10

with open(sys.argv[1]) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afc9031c99526bc7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43

with open(outc, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21df2cd48c0b2563 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50

with open(outh, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #934725bc5a391ffe — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57

with open(tmpc, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5eeab80cc2511894 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:68

with open(tmpc, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e8d163052237d19 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/99 postconf/postconf.py:10

input_file = os.path.join(os.environ['MESON_SOURCE_ROOT'], 'raw.dat')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d4f8535a31f779b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/99 postconf/postconf.py:11

output_file = os.path.join(os.environ['MESON_BUILD_ROOT'], 'generated.h')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9733e2e47138775 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/99 postconf/postconf.py:13

with open(input_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b6d8f62407c0ea6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/common/99 postconf/postconf.py:15

with open(output_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c6c8e280ee0fafd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/cython/2 generated sources/gen.py:10

with open(args.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2ee680f119070b2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/cython/2 generated sources/generator.py:11

with open(args.input) as i, open(args.output, 'w') as o:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d77cc4702afe1f07 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/cython/2 generated sources/libdir/gen.py:10

with open(args.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36c9c85042a62e2a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/39 custom target plainname many inputs/catfiles.py:6

with open(out, 'wb') as o:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e2c8500674448b7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/39 custom target plainname many inputs/catfiles.py:8

        with open(infile, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e794c22e072b22b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/40 custom target outputs not matching install_dirs/generator.py:11

with open(os.path.join(odir, name + '.h'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2411c596dfd2aa19 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/40 custom target outputs not matching install_dirs/generator.py:13

with open(os.path.join(odir, name + '.c'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b333504ac76d1905 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/40 custom target outputs not matching install_dirs/generator.py:15

with open(os.path.join(odir, name + '.sh'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae7d33c7ad442c74 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/88 custom target install data/preproc.py:11

with open(outf, 'wb') as o:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #923756b5715e08c6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/failing/88 custom target install data/preproc.py:12

    with open(inf, 'rb') as i:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #216fef39f497ff8f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/format/5 transform/file_compare.py:16

    with open(args.actual, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96ac03f91c86e9ae — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/format/5 transform/file_compare.py:18

    with open(args.expected, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1feaab75b72e8323 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/fortran/7 generated/gen.py:36

    with open(args.input, 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3e359fde0c3a0d5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/fortran/7 generated/gen.py:41

    with open(args.output, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ce1b72283f69cad — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/frameworks/10 gtk-doc/include/generate-enums-docbook.py:52

        with open(sys.argv[1], 'w') as doc_out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad947624deb2cfa7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/frameworks/4 qt/subfolder/generator.py:5

    with open(sys.argv[1], "w") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7a79722cf1956c6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/frameworks/6 gettext/data3/verify.py:12

with open(fname, 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aace351f4d92a290 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/osx/2 library versions/require_pkgconfig.py:6

if 'CI' in os.environ or shutil.which('pkg-config'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87c064e315a3a7ec — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/python/4 custom target depends extmodule/blaster.py:25

    with open(options.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #debd8d7ebd37a6ba — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/python3/4 custom target depends extmodule/blaster.py:26

    with open(options.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2314405f8404d83a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/rust/11 generated main/gen.py:12

    with open(args.out, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1d3dde7a9c4b297 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/rust/19 structured sources/gen.py:12

    with open(args.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3330cc42bbeda4b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/2 testsetups/envcheck.py:5

assert 'PATH' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4982741d6c1774b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/26 install umask/myinstall.py:6

prefix = os.environ['MESON_INSTALL_DESTDIR_PREFIX']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14ed6a75c8705bae — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/26 install umask/myinstall.py:16

with open(os.path.join(dirname, sys.argv[2]), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7c5b98b1b37e689 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/35 dist script/replacer.py:10

source_root = pathlib.Path(os.environ['MESON_DIST_ROOT'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d8c6c7e1b74e2f1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/35 dist script/replacer.py:14

contents = modfile.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3436f7d30cc1d784 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/35 dist script/replacer.py:16

modfile.write_text(contents)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e11606fffd42d763 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/35 dist script/subprojects/sub/dist-script.py:11

source_root = pathlib.Path(os.environ['MESON_PROJECT_DIST_ROOT'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f20a175abde47719 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/35 dist script/subprojects/sub/dist-script.py:12

mesonrewrite = shlex.split(os.environ['MESONREWRITE'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49590f9b3834d179 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/45 native dep pkgconfig var/cross_pkgconfig.py:7

environ = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9dbab4473f8d075 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:5

assert 'ENV_A' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef768e3f2e668dfe — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:6

assert 'ENV_B' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c37d1d2ea11ff70b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:7

assert 'ENV_C' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c327ad6c4f85729 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:9

print('ENV_A is', os.environ['ENV_A'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c39112ea51b0693a — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:10

print('ENV_B is', os.environ['ENV_B'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ceb4c95e63b3245 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/48 testsetup default/envcheck.py:11

print('ENV_C is', os.environ['ENV_C'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5533ba37e1a9895 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/67 test env value/test.py:6

assert os.environ['TEST_VAR'] == sys.argv[1]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bfea122d4530733 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/70 cross test passed/exewrapper.py:15

    defined = 'MESON_EXE_WRAPPER' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c42ccc822e73e693 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/70 cross test passed/exewrapper.py:18

        print(os.environ, file=sys.stderr)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8278f50bb328e6df — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/90 devenv/test-devenv.py:5

assert os.environ['MESON_DEVENV'] == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9572d483b075230b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/90 devenv/test-devenv.py:6

assert os.environ['MESON_PROJECT_NAME'] == 'devenv'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c469c07287ccbe00 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/90 devenv/test-devenv.py:7

assert os.environ['TEST_A'] == '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bd896542278a3c6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/90 devenv/test-devenv.py:8

assert os.environ['TEST_B'] == '0+1+2+3+4'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aeb2cd286f9059fc — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/90 devenv/test-devenv.py:9

assert os.environ['TEST_C'] == os.pathsep.join(['/prefix', '/suffix'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19724cb3075c8135 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/94 custominc/easytogrepfor/genh.py:5

f = open(sys.argv[1], 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ce662e1e5f63568 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/98 install all targets/script.py:6

  with open(f, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2127ba8a521b1c84 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/unit/98 install all targets/subdir/script.py:6

  with open(f, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52415967952514fe — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/vala/10 mixed sources/c/writec.py:11

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b534995a82a4087d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/vala/8 generated sources/src/write_wrapper.py:11

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3aa5b7b59691f02 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/windows/10 vs module defs generated custom target/subdir/make_def.py:4

with open(sys.argv[1], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4083247533838a7f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/windows/12 resources with custom targets/res/gen-res.py:5

with open(sys.argv[1]) as infile, open(sys.argv[2], 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a191d976c6b2187 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/windows/14 resources with custom target depend_files/ico/gen-ico.py:5

with open(sys.argv[1], 'rb') as infile, open(sys.argv[2], 'wb') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5ff380a90ee4b52 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/test cases/windows/16 gui app/gui_app_tester.py:8

    if 'CI' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d7646049e2614c31 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/ac_converter.py:362

with open(sys.argv[1], encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c4bc7eceaf962449 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/boost_names.py:69

    raw = jamroot.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #af3cf4c2f7e6b652 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/boost_names.py:82

    raw = jamfile.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #bf36647ce0550a12 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/boost_names.py:176

    data = json.loads(meta_file.read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b8f73abf0ca97970 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/tools/build_website.py:30

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #01f6f0e10f41bf69 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/dircondenser.py:46

    with open(sourcefile, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #30916569bb5fc854 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/dircondenser.py:50

    with open(sourcefile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ab59f5c2c50790ab — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/tools/regenerate_docs.py:23

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0f8296bf7e832ce5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/regenerate_docs.py:121

            with open(output_dir / (cmd+'_'+typ+'.inc'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #3b2c03f040cc6e37 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/tools/regenerate_docs.py:125

    url = urlopen('https://wrapdb.mesonbuild.com/v2/releases.json')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #8e5b398b386f460d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/regenerate_docs.py:127

    with open(output_dir / 'wrapdb-table.md', 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b398b6db19885df0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/tools/regenerate_docs.py:160

        with open(output_dir/dummy_output_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4dd15a64bba7765 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/__init__.py:12

        if v in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a72c1ad35463c30d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/__init__.py:13

            del os.environ[v]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bffeaeecd1c16e56 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/__init__.py:16

    os.environ.setdefault('MESON_UNIT_TEST_BACKEND', 'ninja')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afddca9a96c95b30 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:136

                with open(fin, 'wb') as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #247a57d8df159b2a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:140

                    with open(fout, 'rb') as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9df698e4ddb3d03 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:258

                with open(os.path.join(self.builddir, header), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9e2f794a3482b55 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:262

                with open(os.path.join(cmake_builddir, header), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99338ce1d840aa84 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:541

        text_log = Path(self.logdir, 'testlog.txt').read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89bc284c364b2fbc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:543

        json_log = json.loads(Path(self.logdir, 'testlog.json').read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1d23e6dc65633cc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:741

        with open(os.path.join(self.logdir, 'testlog.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5e9893a02376eab — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:760

        with open(os.path.join(self.logdir, 'testlog.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7500edfe339bd195 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:800

        with open(os.path.join(self.logdir, 'testlog.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cb7d189cbf69369 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:805

        with open(os.path.join(self.logdir, 'testlog-valgrind.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afe52eb3561fee91 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:825

        with open(os.path.join(self.logdir, 'testlog-good.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3c20a1768523089 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:830

        with open(os.path.join(self.logdir, 'testlog-good.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e232994740de92e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:866

        with open(os.path.join(self.logdir, 'testlog.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f7baca56801787c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:871

        with open(os.path.join(self.logdir, 'testlog-mydefault.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14a9bffe66c1562b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:876

        with open(os.path.join(self.logdir, 'testlog-other.txt'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1cf4c9966561a4b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:897

            with open(os.path.join(self.logdir, 'testlog.json'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8de9cba4fe2b4657 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1057

        if mesonbuild.envconfig.detect_msys2_arch() and ('MESON_RSP_THRESHOLD' in os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfc22bc1d3c52cbb — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1122

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b278ea8b99e0811 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1143

            if evar in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb62ea4accf90070 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1156

                        evalue = os.environ.pop(evar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #722f6d51acfd6886 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1237

                    if 'arch' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee798707668edb00 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1238

                        if os.environ['arch'] == 'x64':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdd95ea78b3c4044 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1249

                os.environ[evar] = ' '.join(quote_arg(w) for w in wrappercc)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f01aff585e827c3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1253

                os.environ['AR'] = ' '.join(quote_arg(w) for w in wrapperlinker)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ea29f102d1c22ab — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1268

                del os.environ['AR']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18e6a0b68059a1c4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1344

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c200cd6b281211df — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1573

            with open(os.path.join(project_dir, '.hg', 'hgrc'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #717b28a417f4a40c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1613

        with open(os.path.join(path, 'meson.build'), 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8341254358e57ac1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1621

            with open(os.path.join(project_dir, 'meson.build'), 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2129bfba48b21e54 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1631

            with open(distexe_c, 'w', encoding='utf-8') as ofile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20f78ef49f08cb55 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:1969

                with open(os.path.join(d, 'alexandria.pc'), 'w',
                          encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a99377b0d08ba86 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2011

                with open(os.path.join(d, 'alexandriaConfig.cmake'), 'w',
                        encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0852b68e3be4cea — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2140

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40d1db5b03826874 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2148

        os.environ['PKG_CONFIG_LIBDIR'] = self.privatedir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8437a425e9862a4e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2172

            with open(os.path.join(self.privatedir, name), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0521de25ab8bf166 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2564

                    with open(os.path.join(tmpdir, 'foo.' + lang), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c87db102ceb1f165 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2570

                    with open(os.path.join(tmpdir, 'Foo.' + lang), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d8943bcc0176158 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2986

        with open(os.path.join(self.builddir, 'nosubst-nocopy1.txt'), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d229acea3a2cd5d5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2988

        with open(os.path.join(self.builddir, 'nosubst-nocopy2.txt'), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79862ad3caaa2b9a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:2995

                of = open(mfile, 'w', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bae7824a3b6db370 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3215

                            with open(intro_installed_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d065abd0d302ae3c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3223

        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5857765c5f01c04 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3226

        with open(filename, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6b86ab0b280ba20 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3251

        open(filename, 'w', encoding='utf-8').close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a33c68b601a6495c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3406

            self.assertNotEqual(Path(testfile).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #441b1d7a1679c44e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3407

                                Path(goodfile).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8fb49d95ab960f3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3408

            self.assertNotEqual(Path(testheader).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b14197c08557bb56 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3409

                                Path(goodheader).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88611ee0ed9b2645 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3413

            self.assertNotEqual(Path(testfile).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e00517a7e42cc27 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3414

                                Path(goodfile).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0e69081d0062997 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3415

            self.assertNotEqual(Path(testheader).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58959d8ddd8a7369 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3416

                                Path(goodheader).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f7363a45b0ca870 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3419

            with open(includefile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95cdab850be377fc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3422

            self.assertEqual(Path(testheader).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ba69807254cc30c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3423

                             Path(goodheader).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9c4836e987adac2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3465

        self.assertNotEqual(Path(testfile).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #538e28a8c63abc3e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3466

                            Path(fixedfile).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ede5413cee297c2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3471

        self.assertEqual(Path(testfile).read_text(encoding='utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e1b9f1b586fa170 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3472

                         Path(fixedfile).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78d828acfa2717ab — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3523

        with open(os.path.join(infodir, 'intro-targets.json'), encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48a04327387a2d5b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3657

            with open(curr, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #309f6ed1e51ae7a6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3795

            with open(curr, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b1ac67be335db42 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3805

        with open(introfile, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12956e0245d0c9d2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3820

        with open(introfile, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56e01b2e066e968c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3838

        with open(introfile, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfdd36987c52326a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:3849

        with open(introfile, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c388121c793e67b2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4279

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84eca9aa414b02bf — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4296

        with open(doc_path, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c953e0faf5e9e96 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4499

            with open(os.path.join(srcdir, 'subprojects', 'wrap_git.wrap'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab77bbd2d803b3f8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4516

            with open(os.path.join(srcdir, 'subprojects', 'wrap_git.wrap'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #909b617d0980802d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4553

        with open(machinefile, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d7f3669d7df20a3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4582

        with open(redirect_wrap, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c93d4029ebbfab6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4591

        with open(redirect_wrap, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db31698b8a8cc769 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4600

        with open(redirect_wrap, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b48f44f3ce5ff6b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4609

        with open(redirect_wrap, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #049f5300a17b60e3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4614

        with open(real_wrap, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #398af65a7f01acf6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4741

        o = Path(fname).read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de641d84777bc303 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4800

        with mock.patch.dict(os.environ, {'CFLAGS': '-DCFLAG', 'LDFLAGS': '-flto'}):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3b38fc3c0016dd7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:4991

        with open(introfile, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7e4b3d055df8efd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5324

        with open(gen_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8315dbf563bb0e6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5332

        with open(gen_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba961f569bb7bf31 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5409

        olddata = filename.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3cde161dfb501f26 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5414

            newdata = filename.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7b24bbf3cb9bdb5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5423

            newdata = filename.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74aea043e8e6a05b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5585

        with open(os.path.join(testdir, 'mod1.f90'), 'a', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a885ac52a3835124 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/allplatformstests.py:5595

        with open(os.path.join(testdir, 'test.f90'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9667f8ecff9d0e5b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:72

        cls.backend_name = os.environ.get('MESON_UNIT_TEST_BACKEND', 'ninja')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1530f7f1a00d4303 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:107

        cls.env_patch = mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f41bee44a99f8fd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:110

        os.environ['COLUMNS'] = '80'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab3eff57a75cf558 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:111

        os.environ['PYTHONIOENCODING'] = 'utf8'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cc24ce247bd6af2 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:120

        if (is_windows() or is_cygwin()) and not os.environ.get('MESON_FORCE_UNITTEST_IN_TMP', '0') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #145cd09e7280406a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:160

        return open(log, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25b4011f5a1b24e9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:186

            env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50bfc98dd22c33de — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:290

            with mock.patch.dict(os.environ, override_envvars):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5a8b90a4226398f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:341

            with open(os.path.join(self.builddir, 'compile_commands.json'), encoding='utf-8') as ifile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #302bb0cfe1d6466a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/baseplatformtests.py:355

                with open(rsp, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16ff19ad1dcc9f76 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:188

            with open(filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5c70e40b7f8c6a3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:328

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10a224bfb73979cc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:346

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee549fdb27ab76e9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:360

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bff6e241bbe87d14 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:397

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34f17b966451eb9b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:414

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63eae1c8a87342d6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:438

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bb147f7c5aa2434 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:454

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #990bfbd1bc9d2597 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:494

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f8ddef6940009ea — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:512

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a39a9329cd35eb8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:546

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d87ea53e9cbf44d3 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/cargotests.py:566

            with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50e98197e0b04841 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/darwintests.py:59

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #686450c5850498a6 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/darwintests.py:70

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb8da5f5853919a7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:71

        with open('docs/markdown/Builtin-options.md', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2deeb04bc34a61a0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:105

        with open('docs/markdown/Builtin-options.md', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a25390b6f5f8458b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:176

        with open("docs/markdown/Reference-tables.md", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #edd19a2b3a52e613 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:192

        with open("docs/sitemap.txt", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e173eb089aec50a2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:206

        with open("docs/theme/extra/templates/navbar_links.html", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a415b775969d8e1d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:218

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a5d361fd22f9545 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:228

        del os.environ['MESON_RUNNING_IN_PROJECT_TESTS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e0578176331bcc2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:231

        with open('data/syntax-highlighting/vim/syntax/meson.vim', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e82fb038d769bbb — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:236

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #007304eb63a1887b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/datatests.py:246

        del os.environ['MESON_RUNNING_IN_PROJECT_TESTS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c55545e441e18dd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/failuretests.py:93

        with open(self.mbuild, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29b0853a93ccd97b — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/failuretests.py:102

            with open(self.moptions, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40517e0f8d7e724d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/failuretests.py:119

        with open(self.mbuild, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01859a00e1ced804 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/featurestests.py:85

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01fd8d2a8d476243 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/featurestests.py:96

        os.environ.pop('MESON_RUNNING_IN_PROJECT_TESTS', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d482bf5fa299fd6 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/helpers.py:34

IS_CI = os.environ.get('MESON_CI_JOBNAME', 'thirdparty') != 'thirdparty'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e67d7bbd3b36330 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/helpers.py:211

            if not IS_CI and key in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c73353f3e380bfa — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/helpers.py:213

            with mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf41b603cb96afd5 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/helpers.py:214

                os.environ.pop(key, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0476aa7f7d575d1d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/helpers.py:301

    if os.environ.get('MESON_CI_JOBNAME') == name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #350f2d670e7057aa — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/internaltests.py:727

            script_path.write_text('import sys\nprint(sys.argv[1])\n', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7976e5d25595e6bd — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/internaltests.py:1081

        with open('data/test.schema.json', 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96ee98a69b7ed019 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/internaltests.py:1092

                schema_validator(json.loads(p.read_text(encoding='utf-8')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0203523639c4abf — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:42

PKG_CONFIG = os.environ.get('PKG_CONFIG', 'pkg-config')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f63ae579f99b612f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:58

    pkgconf = os.environ.get('PKG_CONFIG_PATH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4a7ecd407dbbc2f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:156

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d959ca3e1b7f41f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:168

        os.environ['PKG_CONFIG_LIBDIR'] = self.privatedir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f7b182eed46ef70 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:224

        with open(os.path.join(privatedir2, 'dependency-test.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44e50a1ce077ded8 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:255

        with open(os.path.join(privatedir1, 'simple2.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6d2d068c9ebafa0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:260

        with open(os.path.join(privatedir1, 'simple3.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be9207fefa3b7cbc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:264

        with open(os.path.join(privatedir1, 'simple5.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ab3fa05902963ea — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:268

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7878560d544f81e0 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:274

        os.environ['PKG_CONFIG_LIBDIR'] = os.path.join(self.builddir, 'meson-uninstalled')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afeb28abf47715da — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:276

            os.environ['PATH'] += os.pathsep + self.builddir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abcbbc4b6d35e6ee — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:287

        with open(os.path.join(self.privatedir, 'somename.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08e1cff975b923fd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:824

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e924d8c576e202d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:849

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as ifile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9f7e048c55098af — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1132

            myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0158310df69ed7f9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1143

            myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba8c7fcda3939a44 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1272

        myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6ebacc28b5e45f7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1287

        myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec0fdf98db0735f5 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1300

        myenv = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f3c7aa6d171a3ba — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1312

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as bfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb31290c23dd28aa — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1331

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as bfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5078742008cb4f4f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1344

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as bfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89a7eea569030347 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1430

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as bfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0252a13be141435 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1495

                os.pathsep + os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f9f5550d283cd92 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1545

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8eb9bbe3e8903069 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1554

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c9511cfa9d646d9 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1653

            with mock.patch.dict(os.environ, {envvar: name}):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26b3b9d3d9e2408f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1704

        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db56b7950761877c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1728

        with open(wrap_filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1066a75ac32cc355 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1756

            with open(os.path.join(d, 'meson.build'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cc00a4559342063 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1767

        with open(os.path.join(self.privatedir, 'bar1.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9abaeda1ef2c4236 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1770

        with open(os.path.join(self.privatedir, 'bar2.pc'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #694693e4f570bd49 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/linuxliketests.py:1888

        with open(os.path.join(self.builddir, 'build.ninja'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c43f7c0e1bb44c95 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:80

                home = PurePath(os.environ['HOME'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #909ab67cfed550ae — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:84

                if 'USER' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5ac89e7837d8c20 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:86

                home = PurePath('C:\\', 'Users', os.environ['USER'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00e4bf4813f26496 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:112

        with open(filename, 'wt', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0eccfd32258d1d2 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:134

        with open(filename, 'wt', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2acd45564488358d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:172

        with open(batfile, 'wt', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3154c176d69ffbc5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:206

                with open(fifo, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f675ae8247e79e67 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:793

    @skipIf('MESON_EXE' in os.environ, 'MESON_EXE is defined, cannot use mocking.')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79885027cf0ff8dd — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:808

                with mock.patch.dict(os.environ, {'XDG_DATA_HOME': d}):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b36477ef5be181c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:813

                with mock.patch.dict(os.environ, {'XDG_DATA_DIRS': d}):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #374754f992b09c5d — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:814

                    os.environ.pop('XDG_DATA_HOME', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dac0cd414d57d4af — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:829

                with mock.patch.dict(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0af6014538f3412b — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:830

                    os.environ.pop('XDG_DATA_HOME', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b680e6c8b139ff7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:843

        with open(filename, 'wt', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a89be1010f962e8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/machinefiletests.py:943

                    del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f05a63ffed8701a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:104

                with open(os.path.join(self.builddir, 'meson-info', 'intro-targets.json'), 'r', encoding='utf-8') as tgt_intro:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #148e011cf931ae83 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:141

            with urllib.request.urlopen('https://wrapdb.mesonbuild.com') as p:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #872d3d6442b0b0eb — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:174

        with open(os.path.join(testdir, 'test.json'), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7852a5b0ca43c2c — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:295

        with open(os.path.join(self.builddir, 'meson-logs', 'profile-startup-modules.json'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0d7261b1e96f512 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:298

        with open(os.path.join(testdir, 'expected_mods.json'), encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19e4766c8422a2b7 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:387

        with open(editorconfig, 'w', encoding='utf-8') as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c119a5c59dc2f4a5 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:453

        with open(os.path.join(testdir, 'meson_options.txt'), 'a', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a70e1e599aa04aee — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:462

        with open(os.path.join(testdir, 'meson_options.txt'), 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e023e02d962dcee — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:464

        with open(os.path.join(testdir, 'meson_options.txt'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f9fb0e22045851a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:487

        with open(os.path.join(testdir, 'meson_options.txt'), 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9b7df86380c3fd1 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:489

        with open(os.path.join(testdir, 'meson_options.txt'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ef06ed3c736c33f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:502

        with open(os.path.join(testdir, 'meson_options.txt'), 'r', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6988c03367bd882 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:504

        with open(os.path.join(testdir, 'meson_options.txt'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9ac9b96ac8ff0ae — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:527

        with open(os.path.join(testdir, 'meson.options'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71c5274056431209 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:536

        with open(os.path.join(testdir, 'meson_options.txt'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85cae864c23becc9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:545

        with open(os.path.join(testdir, 'subprojects/subproject/meson_options.txt'), 'a', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55fa83fe99472755 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:600

            Path(d, 'bar.c').write_text('int main() {}', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5819a8bf7b00d942 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:605

            meson_build = Path(d, 'meson.build').read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56336aef3c9ae497 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:612

            Path(d, 'bar.c').write_text('int bar() {}', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f247ac74003cf49 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:613

            Path(d, 'foo.c').write_text('int main() {}', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e4a08e33b6c1585 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:617

            meson_build = Path(d, 'meson.build').read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b11dc843d4974a4 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:624

            Path(d, 'bar.c').write_text('int main() {}', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #253bb301832817b0 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:629

            meson_build = Path(d, 'meson.build').read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d83c608005e14473 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/platformagnostictests.py:640

            meson_build = Path(d, 'meson.build').read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d07ebb65f06f90f — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/pythontests.py:45

            mesonfile.write_text('''project('test', 'c', version: '1')
pymod = import('python')
python = pymod.find_installation('python3', required: true)
''', encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #192c69157b44b90d — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/rewritetests.py:485

        original_contents = meson_build_file.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #226b110ba357cf74 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/rewritetests.py:531

        expected = Path(test_path / "expected_dag.txt").read_text(encoding='utf-8').strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd927456e1688d08 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/subprojectscommandtests.py:35

        with open(str(path / 'meson.build'), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7beda4adcd2da77e — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/subprojectscommandtests.py:97

        with open(str((self.subprojects_dir / name).with_suffix('.wrap')), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9bf6807fa56c2b9 — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/subprojectscommandtests.py:112

        with open(str((self.subprojects_dir / name).with_suffix('.wrap')), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2acbe58a84a205dc — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/subprojectscommandtests.py:260

        with open(str((self.subprojects_dir / 'redirect').with_suffix('.wrap')), 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86d3851349ad3d60 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:49

    @mock.patch.dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c10b2d0486e9bb63 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:78

        os.environ['PATH'] += os.pathsep + testdir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9474dd9f94908e8 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:80

        if '.PY' in [ext.upper() for ext in os.environ['PATHEXT'].split(';')]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b766a65c5ae864f — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:104

        path = os.environ['PATH']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2985aed74b5c2a7 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:106

            username = os.environ['USERNAME']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c47aed8aafa34e87 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:240

            current_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9860c3691f897c3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:296

            with mock.patch.dict(os.environ, {envvar: name}):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b9d8aa38573232a — Filesystem access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:382

        with open(build_ninja, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #308d511c85c2841c — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:441

        if 'VSCMD_VER' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32b3a333bfd49e82 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:443

        if version_compare(os.environ['VSCMD_VER'], '<16.10.0'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3924342db4fbbc3 — Environment-variable access.

pkgs/python/[email protected]/vendored-meson/meson/unittests/windowstests.py:466

        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pandas

python dependency

expand_more 29 low-confidence finding(s)

low env_fs dependency Excluded from app score #c6970e93acea13b8 — Filesystem access.

pkgs/python/[email protected]/generate_pxi.py:8

    with open(pxifile, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c66cc63ed4fb56f1 — Filesystem access.

pkgs/python/[email protected]/generate_pxi.py:12

    with open(outfile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2de2e74af0040178 — Environment-variable access.

pkgs/python/[email protected]/generate_version.py:25

    if os.environ.get("MESON_DIST_ROOT"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d6daf3574a0421b — Environment-variable access.

pkgs/python/[email protected]/generate_version.py:26

        path = os.path.join(os.environ.get("MESON_DIST_ROOT"), path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1fbbb433b12da637 — Filesystem access.

pkgs/python/[email protected]/generate_version.py:27

    with open(path, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6040bae14c4bb834 — Environment-variable access.

pkgs/python/[email protected]/pandas/_testing/contexts.py:76

                    del os.environ["TZ"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b2ce80b162b1efc — Environment-variable access.

pkgs/python/[email protected]/pandas/_testing/contexts.py:80

                os.environ["TZ"] = tz

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44b0995c8060de8c — Environment-variable access.

pkgs/python/[email protected]/pandas/_testing/contexts.py:85

    orig_tz = os.environ.get("TZ")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32704935b886d34d — Filesystem access.

pkgs/python/[email protected]/pandas/_version.py:159

        with open(versionfile_abs, encoding="utf-8") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92c87782a180fbc1 — Environment-variable access.

pkgs/python/[email protected]/pandas/_version.py:264

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2a2f4d1eacf2c56 — Environment-variable access.

pkgs/python/[email protected]/pandas/compat/__init__.py:154

    return os.environ.get("PANDAS_CI", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ba3ac6a284e7735 — Environment-variable access.

pkgs/python/[email protected]/pandas/core/config_init.py:425

        if os.environ.get("PANDAS_COPY_ON_WRITE", "0") == "warn"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bee232d93bf2ad06 — Environment-variable access.

pkgs/python/[email protected]/pandas/core/config_init.py:426

        else os.environ.get("PANDAS_COPY_ON_WRITE", "1") == "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d724273207c6b009 — Environment-variable access.

pkgs/python/[email protected]/pandas/core/config_init.py:878

        False if os.environ.get("PANDAS_FUTURE_INFER_STRING", "1") == "0" else True,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #662e8ef1ef74e5c6 — Environment-variable access.

pkgs/python/[email protected]/pandas/core/config_init.py:895

        os.environ.get("PANDAS_FUTURE_DISTINGUISH_NAN_AND_NA", "0") == "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #462f8c44fee9ae24 — Environment-variable access.

pkgs/python/[email protected]/pandas/core/config_init.py:906

        False if os.environ.get("PANDAS_FUTURE_PYTHON_SCALARS", "0") == "0" else True,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1de2f1c18b5a388 — Filesystem access.

pkgs/python/[email protected]/pandas/core/series.py:1573

            with open(buf, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #699c2fad62a11ddf — Environment-variable access.

pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:74

HAS_DISPLAY = os.getenv("DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24b0f73f410b51f4 — Filesystem access.

pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:302

        with open("/dev/clipboard", "w", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1924b2bfe180b0c5 — Filesystem access.

pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:306

        with open("/dev/clipboard", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2d483f26b9b7f43 — Environment-variable access.

pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:569

        if os.environ.get("WAYLAND_DISPLAY") and _executable_exists("wl-copy"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7ba850e6e8cd19bd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/pandas/io/common.py:282

    return urllib.request.urlopen(*args, **kwargs)  # noqa: TID251

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #250cd5cb533b345e — Filesystem access.

pkgs/python/[email protected]/pandas/io/common.py:930

            handle = open(
                handle,
                ioargs.mode,
                encoding=ioargs.encoding,
                errors=errors,
                newline="",
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #976610b217edc2ef — Filesystem access.

pkgs/python/[email protected]/pandas/io/common.py:939

            handle = open(handle, ioargs.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bad84d7b4e40ad7 — Filesystem access.

pkgs/python/[email protected]/pandas/io/common.py:1192

        handle = open(handle, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d2c79c2ea2a1693 — Filesystem access.

pkgs/python/[email protected]/pandas/io/formats/format.py:1076

        with open(buf, "w", encoding=encoding, newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4ca0ff4c7bc0f9f — Environment-variable access.

pkgs/python/[email protected]/pandas/util/_print_versions.py:57

        "LC_ALL": os.environ.get("LC_ALL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de4b6f847ef9db5d — Environment-variable access.

pkgs/python/[email protected]/pandas/util/_print_versions.py:58

        "LANG": os.environ.get("LANG"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0385e567c34dba65 — Filesystem access.

pkgs/python/[email protected]/pandas/util/_print_versions.py:148

            with open(as_json, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

plotly

python dependency

expand_more 33 low-confidence finding(s)

low env_fs dependency Excluded from app score #eb668eed4b4333d7 — Environment-variable access.

pkgs/python/[email protected]/_plotly_utils/files.py:3

PLOTLY_DIR = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e417b14ecdde956 — Environment-variable access.

pkgs/python/[email protected]/_plotly_utils/files.py:3

PLOTLY_DIR = os.environ.get(
    "PLOTLY_DIR", os.path.join(os.path.expanduser("~"), ".plotly")
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a5f9575258c2426 — Filesystem access.

pkgs/python/[email protected]/_plotly_utils/files.py:18

        with open(TEST_FILE, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54d27efee037d5bd — Filesystem access.

pkgs/python/[email protected]/_plotly_utils/png.py:1285

        with open(file, "wb") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e556e332af80a705 — Filesystem access.

pkgs/python/[email protected]/_plotly_utils/png.py:1352

            self.file = open(filename, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe40c063336e6ba1 — Filesystem access.

pkgs/python/[email protected]/_plotly_utils/png.py:2350

    return open(path, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #750bc9816c6c206d — Filesystem access.

pkgs/python/[email protected]/plotly/figure_factory/_county_choropleth.py:55

    dbf = io.open(filenames[0], "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d02a56c689b826f — Filesystem access.

pkgs/python/[email protected]/plotly/figure_factory/_county_choropleth.py:56

    shp = io.open(filenames[1], "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #523881b579f456ac — Filesystem access.

pkgs/python/[email protected]/plotly/figure_factory/_county_choropleth.py:57

    shx = io.open(filenames[2], "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f10c7fb37dda9c82 — Filesystem access.

pkgs/python/[email protected]/plotly/io/_html.py:503

        path.write_text(html_str, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6287531496b6d33 — Filesystem access.

pkgs/python/[email protected]/plotly/io/_html.py:512

            bundle_path.write_text(get_plotlyjs(), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07363c26cc6c3945 — Filesystem access.

pkgs/python/[email protected]/plotly/io/_json.py:298

        path.write_text(json_str)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdfd43ff9cf3d670 — Filesystem access.

pkgs/python/[email protected]/plotly/io/_json.py:467

        json_str = path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6af1e3a4634ed5c — Filesystem access.

pkgs/python/[email protected]/plotly/io/_orca.py:251

                with open(self.config_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86d2e79c1db7acff — Filesystem access.

pkgs/python/[email protected]/plotly/io/_orca.py:295

            with open(self.config_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #419d6c7b115e8481 — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_orca.py:888

            {var: os.environ.pop(var) for var in clear_env_vars if var in os.environ}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9ddcb4f3d376d16 — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_orca.py:894

            os.environ[var] = val

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f91e1bee5fb18ef — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_orca.py:962

    path = os.environ.get("PATH", os.defpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da73b0a372006622 — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_orca.py:1007

        and not os.environ.get("DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdcbc78a177c023d — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_orca.py:1055

        if sys.platform.startswith("linux") and not os.environ.get("DISPLAY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d08f909e59e0ab9c — Filesystem access.

pkgs/python/[email protected]/plotly/io/_orca.py:1309

                DEVNULL = open(os.devnull, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7807321f7d09e620 — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_orca.py:1311

                    stderr = DEVNULL if "CI" in os.environ else None  # fix for CI

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7f81f57997be6ee8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/plotly/io/_orca.py:1351

    response = post(server_url + "/", data=json_str)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #51b5cb8de1ed8fdd — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_renderers.py:476

env_renderer = os.environ.get("PLOTLY_RENDERER", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf7e02a280789a72 — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_renderers.py:493

    if not default_renderer and "COLAB_NOTEBOOK_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4007aa4f5b90ba61 — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_renderers.py:501

    if not default_renderer and "AZURE_NOTEBOOKS_HOST" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #daf2132120b9d96d — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_renderers.py:505

    if not default_renderer and "VSCODE_PID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59f5d63f8234d585 — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_renderers.py:509

    if not default_renderer and "NTERACT_EXE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef42b724ad87dc21 — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_renderers.py:513

    if not default_renderer and "COCALC_PROJECT_ID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #935d9653e8c54ba9 — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_renderers.py:516

    if not default_renderer and "DATABRICKS_RUNTIME_VERSION" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b94c397b6aa5a398 — Environment-variable access.

pkgs/python/[email protected]/plotly/io/_renderers.py:520

    if not default_renderer and "SPYDER_ARGS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fba1f77cef5f9931 — Filesystem access.

pkgs/python/[email protected]/plotly/tools.py:693

    with open(config_file, "rt") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06bfb6a0f93079ab — Filesystem access.

pkgs/python/[email protected]/plotly/validator_cache.py:27

            with open(validator_json_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pooch

python dependency

expand_more 15 low-confidence finding(s)

low env_fs dependency Excluded from app score #801b5cd9f6615994 — Environment-variable access.

pkgs/python/[email protected]/pooch/core.py:428

        allow_updates = os.environ.get(allow_updates, "true").lower() != "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a00276370b0b7a0a — Filesystem access.

pkgs/python/[email protected]/pooch/core.py:659

                fin = stack.enter_context(open(fname, encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3ab8c717b77e3d4 — Filesystem access.

pkgs/python/[email protected]/pooch/downloaders.py:227

            output_file = open(output_file, "w+b")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #271c797fd4de5dad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/pooch/downloaders.py:230

            response = requests.get(url, timeout=timeout, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5af59030f6a68bc1 — Filesystem access.

pkgs/python/[email protected]/pooch/downloaders.py:370

            output_file = open(output_file, "w+b")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #679f614573bbf33c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/pooch/downloaders.py:688

    response = requests.get(
        f"https://doi.org/{doi}",
        **kwargs,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6a675aacc3011a39 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/pooch/downloaders.py:856

            self._api_response = requests.get(
                f"{self.base_api_url}/{article_id}", **self.kwargs
            ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4172d4efe3e46285 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/pooch/downloaders.py:1025

            article = requests.get(
                f"https://api.figshare.com/v2/articles?doi={self.doi}",
                **self.kwargs,
            ).json()[0]

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #434c0c57deaa397e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/pooch/downloaders.py:1054

            response = requests.get(api_url, **self.kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e3f7b2d0dc0f786b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/pooch/downloaders.py:1149

        response = requests.get(
            f"{parsed['protocol']}://{parsed['netloc']}/api/datasets/"
            f":persistentId?persistentId=doi:{doi}",
            **kwargs,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #4ffd6005d75dc0c2 — Filesystem access.

pkgs/python/[email protected]/pooch/hashes.py:88

    with open(fname, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #937ad2f358129bdd — Filesystem access.

pkgs/python/[email protected]/pooch/hashes.py:224

    with open(output, "w", encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da8ee4f02ccc182b — Filesystem access.

pkgs/python/[email protected]/pooch/processors.py:382

            with open(decompressed, "w+b") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdbb467881a2a8b1 — Environment-variable access.

pkgs/python/[email protected]/pooch/utils.py:234

    if env is not None and env in os.environ and os.environ[env]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c852a72777b2b10 — Environment-variable access.

pkgs/python/[email protected]/pooch/utils.py:235

        path = os.environ[env]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

scikit-image

python dependency

expand_more 25 low-confidence finding(s)

low env_fs dependency Excluded from app score #baa67d7d75591b36 — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:43

    os.environ['PYTHONPATH'] = f'{site_path}{os.sep}:{os.environ.get("PYTHONPATH", "")}'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab8ac298a5949506 — Environment-variable access.

pkgs/python/[email protected]/.spin/cmds.py:49

    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #02d3794be8de764e — Environment-variable access.

pkgs/python/[email protected]/benchmarks/__init__.py:28

    if os.environ.get("ASV_SKIP_SLOW", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14b23a9afadaf97a — Filesystem access.

pkgs/python/[email protected]/doc/ext/skimage_extensions.py:126

    with open(random_js_path, 'w') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dcf76bf149a97519 — Filesystem access.

pkgs/python/[email protected]/doc/source/conf.py:30

with open("../../src/skimage/__init__.py") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fe4505880563ac64 — Filesystem access.

pkgs/python/[email protected]/doc/tools/apigen.py:194

        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #113bc3aec76e3e09 — Filesystem access.

pkgs/python/[email protected]/doc/tools/apigen.py:412

            with open(outfile, 'w') as fileobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #34750441caf96982 — Filesystem access.

pkgs/python/[email protected]/doc/tools/apigen.py:462

        with open(path, 'w') as idx:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6afcd46aac3f6314 — Filesystem access.

pkgs/python/[email protected]/doc/tools/build_modref_templates.py:42

    source_lines = open('../src/skimage/__init__.py').readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1cd24817e3f87104 — Filesystem access.

pkgs/python/[email protected]/doc/tools/plot_pr.py:98

    PRs = json.loads(open(cache).read())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #3f30438ee2d2fc53 — Filesystem access.

pkgs/python/[email protected]/doc/tools/plot_pr.py:106

    cf = open(cache, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6879b8f14e2f8a4 — Filesystem access.

pkgs/python/[email protected]/src/skimage/_build_utils/tempita.py:25

    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0dd7b6e2c9912615 — Environment-variable access.

pkgs/python/[email protected]/src/skimage/_shared/_warnings.py:121

    strict_warnings = os.environ.get('SKIMAGE_TEST_STRICT_WARNINGS', '1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eba10b2fe74231b2 — Filesystem access.

pkgs/python/[email protected]/src/skimage/data/_fetchers.py:59

        with open(fname, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b3d486c6c68fe0b — Environment-variable access.

pkgs/python/[email protected]/src/skimage/data/_fetchers.py:160

    if 'PYTEST_CURRENT_TEST' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b47b25159a86a2c6 — Filesystem access.

pkgs/python/[email protected]/src/skimage/io/_plugins/pil_plugin.py:34

        with open(fname, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efccdca81a0624eb — Filesystem access.

pkgs/python/[email protected]/src/skimage/io/collection.py:260

                with open(fname, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c054d7ae2d5d710d — Filesystem access.

pkgs/python/[email protected]/src/skimage/io/sift.py:42

        f = open(filelike)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c87c7c9815f3c45c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/src/skimage/io/util.py:27

                with urllib.request.urlopen(resource_name) as u:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #b3dd2bcdb8be4aa6 — Environment-variable access.

pkgs/python/[email protected]/src/skimage/util/_backends.py:10

    no_dispatching = os.environ.get("SKIMAGE_NO_DISPATCHING", False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #46d7721cd7c20a5c — Filesystem access.

pkgs/python/[email protected]/tools/generate_requirements.py:30

    req_fname.write_text("\n".join(header + req_list) + "\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #38e3999e324d61e6 — Filesystem access.

pkgs/python/[email protected]/tools/generate_requirements.py:61

    with open("environment.yml", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #63e6c47193da7e05 — Filesystem access.

pkgs/python/[email protected]/tools/generate_requirements.py:90

    pyproject = toml.loads((repo_dir / "pyproject.toml").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7ba109ebcbc5eb3f — Filesystem access.

pkgs/python/[email protected]/tools/precompute/mc_meta/createluts.py:14

    text = open(fname, 'rb').read().decode('utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #437d429dbfc356bc — Filesystem access.

pkgs/python/[email protected]/tools/precompute/mc_meta/createluts.py:125

    with open(os.path.join(os.getcwd(), 'mcluts.py'), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

seaborn

python dependency

expand_more 23 low-confidence finding(s)

low env_fs dependency Excluded from app score #cf220bd6b5bac551 — Filesystem access.

pkgs/python/[email protected]/ci/cache_datasets.py:18

    with open(fname) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b43217953ab16bee — Filesystem access.

pkgs/python/[email protected]/ci/check_gallery.py:12

        with open(fname) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d01440ee8033c20b — Filesystem access.

pkgs/python/[email protected]/doc/sphinxext/gallery_generator.py:23

    with open(filename, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3affd31c43ae43f4 — Filesystem access.

pkgs/python/[email protected]/doc/sphinxext/gallery_generator.py:171

        with open(filename) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #820164a8ffb5dd73 — Filesystem access.

pkgs/python/[email protected]/doc/sphinxext/gallery_generator.py:255

        lines = open(self.filename).readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #951d2c6e7761e6a0 — Filesystem access.

pkgs/python/[email protected]/doc/sphinxext/gallery_generator.py:375

        with open(op.join(target_dir, ex.rstfilename), 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70d5ef9f579999de — Filesystem access.

pkgs/python/[email protected]/doc/sphinxext/gallery_generator.py:386

    with open(index_file, 'w') as index:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43c94c065e33e668 — Filesystem access.

pkgs/python/[email protected]/doc/sphinxext/tutorial_builder.py:57

    with open(content_yaml) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #589fb7ad650af45b — Filesystem access.

pkgs/python/[email protected]/doc/sphinxext/tutorial_builder.py:67

    with open(tutorial_rst, "w") as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #117dbcbfbbf191d7 — Environment-variable access.

pkgs/python/[email protected]/doc/tools/nb_to_doc.py:79

    if 'NB_KERNEL' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a1e18b535225a159 — Environment-variable access.

pkgs/python/[email protected]/doc/tools/nb_to_doc.py:80

        nb.metadata['kernelspec']['name'] = os.environ['NB_KERNEL']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #370895edb50e9aa3 — Environment-variable access.

pkgs/python/[email protected]/doc/tools/nb_to_doc.py:81

        nb.metadata['kernelspec']['display_name'] = os.environ['NB_KERNEL']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2726f714a1c09bf7 — Filesystem access.

pkgs/python/[email protected]/doc/tools/nb_to_doc.py:114

    with open(fpath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a7f3e1f648718fd4 — Environment-variable access.

pkgs/python/[email protected]/doc/tools/nb_to_doc.py:118

    kernel = os.environ.get("NB_KERNEL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c5e124622a5759af — Filesystem access.

pkgs/python/[email protected]/doc/tools/nb_to_doc.py:159

    with open(fpath, "wt") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0787403e98a2dc73 — Filesystem access.

pkgs/python/[email protected]/doc/tools/nb_to_doc.py:164

    with open(rst_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #64a95d4abee8581d — Filesystem access.

pkgs/python/[email protected]/doc/tools/nb_to_doc.py:175

            with open(impath, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d5362706d5f1de1a — Filesystem access.

pkgs/python/[email protected]/doc/tools/set_nb_kernels.py:15

        with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #9b39aee0abb2ccc9 — Filesystem access.

pkgs/python/[email protected]/doc/tools/set_nb_kernels.py:21

        with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89fb2a473e450747 — Environment-variable access.

pkgs/python/[email protected]/seaborn/external/appdirs.py:122

        path = os.getenv('XDG_CACHE_HOME', os.path.expanduser('~/.cache'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #62a7f94bc984207f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/seaborn/miscplot.py:40

    data = BytesIO(urlopen(url.format(pic)).read())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e92aadc48ba720fa — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/seaborn/utils.py:499

    with urlopen(DATASET_NAMES_URL) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2dfc567846a7d7fd — Environment-variable access.

pkgs/python/[email protected]/seaborn/utils.py:517

        data_home = os.environ.get("SEABORN_DATA", user_cache_dir("seaborn"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

threadpoolctl

python dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #30cbd94fcca97917 — Environment-variable access.

pkgs/python/[email protected]/threadpoolctl.py:48

os.environ.setdefault("KMP_DUPLICATE_LIB_OK", "True")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

scipy prod — sdist exceeds byte cap
matplotlib prod — sdist exceeds byte cap

verified_user Possible application data leak

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Potential data exfiltration in application code

</> First-Party Code

first-party (python)

</> Dependencies

rich

conda-lock

cython

joblib

memory_profiler

meson-python

narwhals

numpy

pandas

plotly

pooch

scikit-image

seaborn

threadpoolctl

Skipped dependencies