Close Open Privacy Scan

link https://github.com/langfuse/langfuse
bolt Snapshot: commit d70f258
science engine v1.22
schedule 2026-07-20T22:16:52.892388+00:00

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

smart_toy MCP server detected: @ai-sdk/anthropic, @ai-sdk/openai, @modelcontextprotocol/sdk, ai — detected in dependencies, not a safety judgment.
Incomplete scan — only 90/191 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

0 /100
High privacy risk — application leak confirmed

High risk · 1061 finding(s)

Dependency score: 0 (High risk)

bar_chart Score Breakdown

pii_flow −60
telemetry −25
egress −15
env_fs −3

list Scan Summary

17 high 110 medium 934 low
First-party packages: 5
Dependency packages: 25
Ecosystem: npm

swap_horiz Confirmed data exfiltration in application code

External domains: access.line.meaccount.box.comaccountname.blob.core.windows.netaccounts.faceit.comaccounts.google.comaccounts.spotify.comaccounts.zoho.comall-http-intake.logs.datad0g.comapi.anthropic.comapi.atlassian.comapi.box.comapi.coinbase.comapi.dropboxapi.comapi.faceit.comapi.foursquare.comapi.freshbooks.comapi.github.comapi.hubapi.comapi.instagram.comapi.intra.42.frapi.linkedin.comapi.medium.comapi.netlify.comapi.openai.comapi.pinterest.comapi.pipedrive.comapi.spotify.comapi.todoist.comapi.trakt.tvapi.twitter.comapi.usepylon.comapi.vk.comapi.workos.comapi.zoom.usapp.circleci.comapp.exampleapp.hubspot.comapp.netlify.comapp.posthog.comappleid.apple.comauth.atlassian.comauth.freshbooks.comauthjs.devavatars.yandex.netbedrock-agent-runtime.us-west-2.amazonaws.combedrock-runtime.us-east-1.amazonaws.combitbucket.orgboosty.tobrowser-intake-ap1-datadoghq.combrowser-intake-ap2-datadoghq.combrowser-intake-uk1-datadoghq.comcal.comcdn.discordapp.comci.appveyor.comclickhouse.comcloud.google.comcloud.langfuse.comcommons.wikimedia.orgdate-fns.orgdiscord.comdocs.aws.amazon.comdocs.github.comdocs.langfuse.comdtdg.coen.wikipedia.orgeu.posthog.comexample.okta.comfoursquare.comgithub.acme.comgithub.comgitlab.comgraph.facebook.comgraph.instagram.comgraph.microsoft.comhipaa.cloud.langfuse.comhttp-intake.logsid.twitch.tvimage.eveonline.comimg.shields.iojp.cloud.langfuse.comjson-schema.orgkapi.kakao.comkauth.kakao.comlangfuse.comlangfuse.locallogin.eveonline.comlogin.mailchimp.comlogin.microsoftonline.comlogin.salesforce.comlogin.yandex.rulu.mamedium.commeta.wikimedia.orgmixpanel.comnext-auth.js.orgnid.naver.comnpms.iooauth.mail.ruoauth.pipedrive.comoauth.reddit.comoauth.vk.comoauth.yandex.ruopenapi.naver.comopencollective.comosu.ppy.shpatreon.complatform.openai.complay.min.ioposthog.compublic-api.wordpress.compublic-trace-http-intake.logs.datad0g.compublic-trace-http-intake.logs.datadoghq.compublic-trace-http-intake.logs.datadoghq.euraw.githubusercontent.comsentry.ioslack.comstaging.langfuse.comstatic.langfuse.comstatic.modelcontextprotocol.iostatus.langfuse.comtanstack.comtodoist.comtools.ietf.orgtrace.browser-intake-us3-datadoghq.comtrace.browser-intake-us5-datadoghq.comtrakt.tvtrpc.iotwitter.comus.cloud.langfuse.comus.i.posthog.comus.posthog.comwww.battlenet.com.cnwww.bungie.netwww.coinbase.comwww.datadoghq.comwww.dropbox.comwww.eclipse.orgwww.facebook.comwww.googleapis.comwww.linkedin.comwww.patreon.comwww.pinterest.comwww.reddit.comwww.strava.comwww.w3.orgx.comx.localyour-instance.openai.azure.comyour-service.comzoom.us

high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:104 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:134 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:141 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/features/auth-credentials/server/signupApiHandler.ts:95 → repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116
high first-party (npm): web A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
repo/web/src/features/auth-credentials/server/signupApiHandler.ts:96 → repo/web/src/features/auth-credentials/server/signupApiHandler.ts:118
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/api/auth/signup-verify.ts:12 → repo/web/src/pages/api/auth/signup-verify.ts:96
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/enterprise-sso-required.tsx:84 → repo/web/src/pages/auth/enterprise-sso-required.tsx:92
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-in.tsx:663 → repo/web/src/pages/auth/sign-in.tsx:677
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-up.tsx:134 → repo/web/src/pages/auth/sign-up.tsx:149
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-up.tsx:355 → repo/web/src/pages/auth/sign-up.tsx:350
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/server/adminAccessWebhook.ts:47 → repo/web/src/server/adminAccessWebhook.ts:57
high first-party (npm): web User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/server/auth.ts:1123 → repo/web/src/server/auth.ts:1119
medium first-party (npm): web Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:247 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244
medium first-party (npm): web Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:342 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332
medium first-party (npm): web Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:382 → repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372
hub Dependency data flows (8)
high next-auth dependency A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/[email protected]/core/lib/oauth/callback.js:83 → pkgs/npm/[email protected]/core/lib/oauth/callback.js:86
high next-auth dependency A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/[email protected]/core/lib/oauth/callback.js:83 → pkgs/npm/[email protected]/core/lib/oauth/callback.js:103
high next-auth dependency A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:87 → pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:91
high next-auth dependency A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:87 → pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:111
high @ai-sdk/amazon-bedrock dependency A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:76 → pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:87
medium next-auth dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/providers/trakt.js:23 → pkgs/npm/[email protected]/providers/trakt.js:22
medium next-auth dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/src/providers/trakt.ts:35 → pkgs/npm/[email protected]/src/providers/trakt.ts:34
medium @ai-sdk/amazon-bedrock dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:76 → pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:90

</> First-Party Code

first-party (npm): web

npm first-party
high pii_flow production #50633d945650b629 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244 · flow /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:104 → /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244 
      await this.post({
        url: this.config.userUrl,
        payload: { isLangfuse: true, ...parsed.data },
        context: { event: "upsertUser", userId: parsed.data.userId },
        expectJsonResponse: false,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f705e5d253565993 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332 · flow /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:134 → /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332 
        await this.post({
          url: this.config.orgUrl,
          payload: {
            isLangfuse: true,
            type: "setUserRole" as const,
            ...parsed.data,
          },
          context: {
            event: "setUserRole",
            orgId: parsed.data.orgId,
            userId: parsed.data.userId,
          },
          expectJsonResponse: false,
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c561ed2d36e50f54 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372 · flow /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:141 → /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372 
        await this.post({
          url: this.config.orgUrl,
          payload: {
            isLangfuse: true,
            type: "removeUser" as const,
            ...parsed.data,
          },
          context: {
            event: "removeUser",
            orgId: parsed.data.orgId,
            userId: parsed.data.userId,
          },
          expectJsonResponse: false,
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #552dd1ca0b2b65bb — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116 · flow /tmp/closeopen-fiqmn297/repo/web/src/features/auth-credentials/server/signupApiHandler.ts:95 → /tmp/closeopen-fiqmn297/repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116 
    await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
      method: "POST",
      body: JSON.stringify({
        name: body.name,
        email: body.email,
        referralSource: body.referralSource,
        cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
        userId: userId,
      }),
      headers: {
        "Content-Type": "application/json",
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #90636cfc54aafd35 — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
repo/web/src/features/auth-credentials/server/signupApiHandler.ts:118 · flow /tmp/closeopen-fiqmn297/repo/web/src/features/auth-credentials/server/signupApiHandler.ts:96 → /tmp/closeopen-fiqmn297/repo/web/src/features/auth-credentials/server/signupApiHandler.ts:118 
      body: JSON.stringify({
        name: body.name,
        email: body.email,
        referralSource: body.referralSource,
        cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
        userId: userId,
      }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c85436d881f4ede1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/api/auth/signup-verify.ts:96 · flow /tmp/closeopen-fiqmn297/repo/web/src/pages/api/auth/signup-verify.ts:12 → /tmp/closeopen-fiqmn297/repo/web/src/pages/api/auth/signup-verify.ts:96 
      await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
        method: "POST",
        body: JSON.stringify({
          name,
          email: normalizedEmail,
          cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
          userId: newUser.id,
        }),
        headers: {
          "Content-Type": "application/json",
        },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #625a58b192512a4c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/enterprise-sso-required.tsx:92 · flow /tmp/closeopen-fiqmn297/repo/web/src/pages/auth/enterprise-sso-required.tsx:84 → /tmp/closeopen-fiqmn297/repo/web/src/pages/auth/enterprise-sso-required.tsx:92 
      const response = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7cae196e261e5e35 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-in.tsx:677 · flow /tmp/closeopen-fiqmn297/repo/web/src/pages/auth/sign-in.tsx:663 → /tmp/closeopen-fiqmn297/repo/web/src/pages/auth/sign-in.tsx:677 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #990d1d9c19691057 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-up.tsx:149 · flow /tmp/closeopen-fiqmn297/repo/web/src/pages/auth/sign-up.tsx:134 → /tmp/closeopen-fiqmn297/repo/web/src/pages/auth/sign-up.tsx:149 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #fb51215fc6d06670 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/pages/auth/sign-up.tsx:350 · flow /tmp/closeopen-fiqmn297/repo/web/src/pages/auth/sign-up.tsx:355 → /tmp/closeopen-fiqmn297/repo/web/src/pages/auth/sign-up.tsx:350 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/signup-verify`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ email: values.email, name: values.name }),
        },
      );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c7a36cd770fdfb88 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/server/adminAccessWebhook.ts:57 · flow /tmp/closeopen-fiqmn297/repo/web/src/server/adminAccessWebhook.ts:47 → /tmp/closeopen-fiqmn297/repo/web/src/server/adminAccessWebhook.ts:57 
    const response = await fetch(env.LANGFUSE_ADMIN_ACCESS_WEBHOOK, {
      method: "POST",
      body: JSON.stringify(payload),
      headers: {
        "Content-Type": "application/json",
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9f0e17840bfe0a4b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/web/src/server/auth.ts:1119 · flow /tmp/closeopen-fiqmn297/repo/web/src/server/auth.ts:1123 → /tmp/closeopen-fiqmn297/repo/web/src/server/auth.ts:1119 
          await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
            method: "POST",
            body: JSON.stringify({
              name: user.name,
              email: user.email,
              cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
              userId: user.id,
              // referralSource: ...
            }),
            headers: {
              "Content-Type": "application/json",
            },
          });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #4d2d244671891331 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/instrumentation-client.ts:1 
import * as Sentry from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry test-only Excluded from app score #46073f18a0fdf4e7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/next.config.mjs:6 
import { withSentryConfig } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a20bce9b23ae508f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/components/error-page.tsx:7 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a84c2b7b3edbe84e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/components/layouts/app-layout/index.tsx:15 
import posthog from "posthog-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #0e10ac5a696fd2d4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/components/layouts/app-layout/index.tsx:133 
      posthog.reset();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium pii_flow production #357162ccf29aa805 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244 · flow /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:247 → /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:244 
      await this.post({
        url: this.config.userUrl,
        payload: { isLangfuse: true, ...parsed.data },
        context: { event: "upsertUser", userId: parsed.data.userId },
        expectJsonResponse: false,
      });

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #f068d974eb9d0f8c — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332 · flow /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:342 → /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:332 
        await this.post({
          url: this.config.orgUrl,
          payload: {
            isLangfuse: true,
            type: "setUserRole" as const,
            ...parsed.data,
          },
          context: {
            event: "setUserRole",
            orgId: parsed.data.orgId,
            userId: parsed.data.userId,
          },
          expectJsonResponse: false,
        });

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #1ab1b27e3da5cb25 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372 · flow /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:382 → /tmp/closeopen-fiqmn297/repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:372 
        await this.post({
          url: this.config.orgUrl,
          payload: {
            isLangfuse: true,
            type: "removeUser" as const,
            ...parsed.data,
          },
          context: {
            event: "removeUser",
            orgId: parsed.data.orgId,
            userId: parsed.data.userId,
          },
          expectJsonResponse: false,
        });

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium telemetry production #9d6a7af9ea59b292 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/auth/lib/createProjectMembershipsOnSignup.ts:287 
        posthog.capture({
          distinctId: user.id,
          event: "cloud_signup_complete",
          properties: {
            cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
            hasDemoAccess: demoProject !== undefined,
            hasDefaultOrg: defaultOrgs.length > 0,
            hasDefaultProject: defaultProjects.length > 0,
          },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d1d170399c670760 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/auth/lib/createProjectMembershipsOnSignup.ts:297 
        await posthog.shutdown();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #8a0588e266ad4ed3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/events/hooks/useV4Beta.ts:4 
import posthog from "posthog-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #bfbd848774a81cfa — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/events/hooks/useV4Beta.ts:35 
            posthog.setPersonProperties({
              [V4_BETA_ENABLED_POSTHOG_PROPERTY]: v4BetaEnabled,
            });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #f120057c0651f5b9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/events/hooks/useV4Beta.ts:38 
            posthog.register({
              [V4_BETA_ENABLED_POSTHOG_PROPERTY]: v4BetaEnabled,
            });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #9eaae6732804a706 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/posthog-analytics/ServerPosthog.ts:2 
import { PostHog } from "posthog-node";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #6ceb3bec16599e02 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/posthog-analytics/usePostHogClientCapture.ts:1 
import { type CaptureResult, type CaptureOptions } from "posthog-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a877fbf54e954866 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/posthog-analytics/usePostHogClientCapture.ts:330 
      return posthog.capture(eventName, properties, options);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #3fc407149a2767d2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/telemetry/index.ts:252 
    posthog.capture({
      distinctId: "docker:" + clientId,
      event: "telemetry",
      properties: {
        langfuseVersion: VERSION,
        userDomains: domains,
        totalProjects: totalProjects,
        traces: countTraces,
        scores: countScores,
        observations: countObservations,
        datasets: countDatasets,
        datasetItems: countDatasetItems,
        datasetRuns: countDatasetRuns,
        datasetRunItems: countDatasetRunItems,
        startTimeframe: startTimeframe?.toISOString(),
        endTimeframe: endTimeframe.toISOString(),
        eeLicenseKey: env.LANGFUSE_EE_LICENSE_KEY,
        langfuseCloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
        $set: {
          environment: process.env.NODE_ENV,
          userDomains: domains,
          docker: true,
          langfuseVersion: VERSION,
        },
      },
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #ef490378b63661ba — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/features/telemetry/index.ts:279 
    await posthog.shutdown();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #8c912cde3e2ad7aa — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/hooks/parserWorkerError.clienttest.ts:2 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #f12009b39736458a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/hooks/parserWorkerError.ts:1 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #fc63b5debc8e778e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:9 
import { setUser } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d940ae3b5b4444b3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:24 
import posthog from "posthog-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a06b745bb0fa8d1b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:95 
  posthog.init(process.env.NEXT_PUBLIC_POSTHOG_KEY, {
    api_host: process.env.NEXT_PUBLIC_POSTHOG_HOST || "https://eu.posthog.com",
    ui_host: "https://eu.posthog.com",
    // Enable debug mode in development
    loaded: (posthog) => {
      if (process.env.NODE_ENV === "development") posthog.debug();
    },
    session_recording: {
      maskCapturedNetworkRequestFn(request) {
        request.requestBody = request.requestBody ? "REDACTED" : undefined;
        request.responseBody = request.responseBody ? "REDACTED" : undefined;
        return request;
      },
    },
    autocapture: false,
    enable_heatmaps: false,
    persistence: "cookie",
  });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #483f11e35a61f76f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:100 
      if (process.env.NODE_ENV === "development") posthog.debug();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #8f38f9ffdde28d06 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:127 
        posthog.capture("$pageview");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2370a16cc4bdd94d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:208 
        posthog.identify(sessionUser.id ?? undefined, {
          environment: process.env.NODE_ENV,
          email: sessionUser.email ?? undefined,
          name: sessionUser.name ?? undefined,
          featureFlags: sessionUser.featureFlags ?? undefined,
          projects:
            sessionUser.organizations.flatMap((org) =>
              org.projects.map((project) => ({
                ...project,
                organization: org,
              })),
            ) ?? undefined,
          LANGFUSE_CLOUD_REGION: region,
          [V4_BETA_ENABLED_POSTHOG_PROPERTY]:
            sessionUser.v4BetaEnabled ?? false,
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #0b26a505c0e3f623 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:224 
        posthog.register({
          [V4_BETA_ENABLED_POSTHOG_PROPERTY]:
            sessionUser.v4BetaEnabled ?? false,
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #c2b505ed643edd3e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_app.tsx:237 
      posthog.unregister(V4_BETA_ENABLED_POSTHOG_PROPERTY);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2e55e645fe9482ee — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/_error.tsx:1 
import {
  captureUnderscoreErrorException,
  isEnabled as isSentryEnabled,
} from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e8b9c56cf6a21b89 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/pages/auth/sign-in.tsx:41 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #fe50c1e7091d3960 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/utils/api.ts:8 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #903dc94b5a8cf4bf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/utils/captureUnknownError.ts:1 
import { captureException } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #ff5c5e623d4e09d4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/utils/sentryFilters.clienttest.ts:1 
import { type ErrorEvent } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #0cf038e2eca093da — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/web/src/utils/sentryFilters.ts:1 
import { type ErrorEvent } from "@sentry/nextjs";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 424 low-confidence finding(s)
low env_fs production #699d32cec15cfdff — Environment-variable access.
repo/web/instrumentation-client.ts:5 
  process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION !== undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1efc7b7e8e03bcf8 — Environment-variable access.
repo/web/instrumentation-client.ts:6 
    ? ["EU", "US"].includes(process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d1afb612e9b2b01 — Environment-variable access.
repo/web/instrumentation-client.ts:10 
  dsn: process.env.NEXT_PUBLIC_SENTRY_DSN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e8869e70c41d738 — Environment-variable access.
repo/web/instrumentation-client.ts:11 
  environment: process.env.NEXT_PUBLIC_SENTRY_ENVIRONMENT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #345c801a8cb1dcca — Environment-variable access.
repo/web/instrumentation-client.ts:12 
  release: process.env.NEXT_PUBLIC_BUILD_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1972300e61d57cdf — Environment-variable access.
repo/web/instrumentation-client.ts:65 
  tracesSampleRate: process.env.NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70117e7ff7c5cec5 — Environment-variable access.
repo/web/instrumentation-client.ts:66 
    ? Number(process.env.NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86da469f0fceba11 — Environment-variable access.
repo/web/instrumentation-client.ts:71 
  replaysSessionSampleRate: process.env.NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #977716df935ceb69 — Environment-variable access.
repo/web/instrumentation-client.ts:72 
    ? Number(process.env.NEXT_PUBLIC_LANGFUSE_TRACING_SAMPLE_RATE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4f171150a509e950 — Environment-variable access.
repo/web/next.config.mjs:66 
  distDir: process.env.NEXT_DIST_DIR || ".next",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #fdf158cb8cfe9a41 — Environment-variable access.
repo/web/next.config.mjs:71 
    ignoreBuildErrors: process.env.NEXT_IGNORE_BUILD_ERRORS === "true",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9f724df3d0cf1159 — Environment-variable access.
repo/web/next.config.mjs:261 
  org: process.env.SENTRY_ORG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #323e7a686e9da3fc — Environment-variable access.
repo/web/next.config.mjs:262 
  project: process.env.SENTRY_PROJECT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8276f751b881cc16 — Environment-variable access.
repo/web/next.config.mjs:267 
  silent: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0e7c3931b3156056 — Environment-variable access.
repo/web/playwright.config.ts:16 
    command: process.env.CI ? "npm run start" : "npm run dev",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cdb78c3d41f51daa — Environment-variable access.
repo/web/playwright.config.ts:18 
    reuseExistingServer: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #7e475fc492bf21bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__e2e__/api.servertest.ts:104 
        const traceResponse = await fetch(traceUrl, {
          headers: {
            Authorization: userApiKeyAuth,
          },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #1afc45db88ae0ffe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__e2e__/api.servertest.ts:294 
    const fetchedPrompt = await fetch(
      `http://localhost:3000/api/public/v2/prompts/${encodeURIComponent(promptName)}`,
      {
        headers: {
          "Content-Type": "application/json",
          Authorization: userApiKeyAuth,
        },
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #4b8efa623f1b14db — Environment-variable access.
repo/web/src/__tests__/after-teardown.ts:9 
  if (process.env.VITEST_SHARED_CONTEXT === "1") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #528bd1238f1e10a3 — Environment-variable access.
repo/web/src/__tests__/server/code-eval-test-run-trpc.servertest.ts:6 
  process.env.LANGFUSE_CODE_EVAL_DISPATCHER = "insecure-local";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #101653df1da298f4 — Environment-variable access.
repo/web/src/__tests__/server/dataset-item-media-references.servertest.ts:242 
    process.env.LANGFUSE_USE_AZURE_BLOB === "true" ? it : it.skip;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #bc7ecb7b9c311728 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/server/dataset-item-media-references.servertest.ts:354 
      const uploadResponse = await fetch(result.uploadUrl!, {
        method: "PUT",
        body: fileBytes as BodyInit,
        headers: {
          "Content-Type": MediaContentType.PNG,
          ...result.uploadHeaders,
        } as HeadersInit,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #9d51189f67b8dad1 — Environment-variable access.
repo/web/src/__tests__/server/dataset-service.servertest.ts:34 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #817de8b7afd87370 — Environment-variable access.
repo/web/src/__tests__/server/dataset-service.servertest.ts:36 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ceffd49a638cc239 — Environment-variable access.
repo/web/src/__tests__/server/datasets-api.servertest.ts:2 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1d489d6259af7d84 — Environment-variable access.
repo/web/src/__tests__/server/datasets-api.servertest.ts:4 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f0981cf20b85c401 — Environment-variable access.
repo/web/src/__tests__/server/datasets-schema-validation.servertest.ts:20 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #64e13acd8a9e26df — Environment-variable access.
repo/web/src/__tests__/server/datasets-schema-validation.servertest.ts:22 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #113360a16e9a7bf3 — Environment-variable access.
repo/web/src/__tests__/server/datasets-ui-table.servertest.ts:12 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b40f91fda0306b98 — Environment-variable access.
repo/web/src/__tests__/server/datasets-ui-table.servertest.ts:14 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4264cb52f88e775c — Environment-variable access.
repo/web/src/__tests__/server/evals-trpc.servertest.ts:5 
  process.env.LANGFUSE_CODE_EVAL_DISPATCHER = "insecure-local";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #39051ed8d11c001f — Environment-variable access.
repo/web/src/__tests__/server/evals-trpc.servertest.ts:6 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #81f4db8f3e25b449 — Environment-variable access.
repo/web/src/__tests__/server/experiments-versioning.servertest.ts:2 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ae69f1894a3fadf1 — Environment-variable access.
repo/web/src/__tests__/server/experiments-versioning.servertest.ts:4 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8317f55ceed8e394 — Environment-variable access.
repo/web/src/__tests__/server/mcp-public-api-tools.servertest.ts:2 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "dual";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e287e9d051775a90 — Environment-variable access.
repo/web/src/__tests__/server/mcp-public-api-tools.servertest.ts:5 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e722c7678080d7ff — Environment-variable access.
repo/web/src/__tests__/server/mcp-public-api-tools.servertest.ts:7 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #653b322645c9e340 — Environment-variable access.
repo/web/src/__tests__/server/mcp-tools-read.servertest.ts:2 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "dual";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #96b09109c1101ac9 — Filesystem access.
repo/web/src/__tests__/server/media.servertest.ts:2 
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c9d5adf403e98ecb — Environment-variable access.
repo/web/src/__tests__/server/media.servertest.ts:29 
    process.env.LANGFUSE_USE_AZURE_BLOB === "true" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c28c354ed222ba6e — Filesystem access.
repo/web/src/__tests__/server/media.servertest.ts:82 
  const fileBytesPNG = fs.readFileSync(imagePathPNG);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #aa3cb674f2b6966f — Filesystem access.
repo/web/src/__tests__/server/media.servertest.ts:99 
  const fileBytesPDF = fs.readFileSync(imagePathPDF);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #39f311d7f07e08bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/server/media.servertest.ts:184 
      const uploadFileResponse = await fetch(
        getUploadUrlResponse.body.uploadUrl,
        {
          method: "PUT",
          body: fileBytes as BodyInit,
          headers: {
            "Content-Type": contentType,
            "X-Amz-Checksum-Sha256": sha256Hash,
          },
        },
      ).catch((err) => console.error(err));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #00b601c097bb404d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/server/media.servertest.ts:234 
      const fetchMediaAssetResponse = await fetch(
        getDownloadUrlResponse.body.url,
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #9efbaa02f4cf82a5 — Environment-variable access.
repo/web/src/__tests__/server/mixpanel-integration.servertest.ts:57 
  const originalEncryptionKey = process.env.ENCRYPTION_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5ef67c639b993630 — Environment-variable access.
repo/web/src/__tests__/server/mixpanel-integration.servertest.ts:60 
    process.env.ENCRYPTION_KEY =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8fddaa817f27a556 — Environment-variable access.
repo/web/src/__tests__/server/mixpanel-integration.servertest.ts:65 
    process.env.ENCRYPTION_KEY = originalEncryptionKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6080bc98bdd9f366 — Environment-variable access.
repo/web/src/__tests__/server/monitors.servertest.ts:6 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "dual";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9cb52f34802b1fea — Environment-variable access.
repo/web/src/__tests__/server/organizations-api.servertest.ts:67 
  const ADMIN_API_KEY = process.env.ADMIN_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f4753abbe9440c51 — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:57 
  const originalEncryptionKey = process.env.ENCRYPTION_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c3a4cc0a25d7faa7 — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:64 
    process.env.ENCRYPTION_KEY =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9f2b7184cfe270b2 — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:70 
    process.env.ENCRYPTION_KEY = originalEncryptionKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6d6ee3babbe6ecd5 — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:98 
  const originalEncryptionKey = process.env.ENCRYPTION_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2200858e49194ebf — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:101 
    process.env.ENCRYPTION_KEY =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #87a3ab373e4083ef — Environment-variable access.
repo/web/src/__tests__/server/posthog-integration.servertest.ts:106 
    process.env.ENCRYPTION_KEY = originalEncryptionKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #1fca369aa44709df — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/server/redis-test-utils.ts:95 
  return await redisClient.get(key);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #ca0fb99f357ff005 — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-item-media-stateful-delete.servertest.ts:2 
  process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b4df2944ae8adc89 — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-item-media-stateful-delete.servertest.ts:4 
  process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cb871c40fdc02079 — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-items-repository.servertest.ts:2 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f66a40b9e56d0e4b — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-items-repository.servertest.ts:4 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bb2895fa2b36f2de — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-items-stateful-upsert.servertest.ts:2 
  process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #85f8723c5574ea1f — Environment-variable access.
repo/web/src/__tests__/server/repositories/dataset-items-stateful-upsert.servertest.ts:4 
  process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #179265cea27c3461 — Environment-variable access.
repo/web/src/__tests__/server/repositories/environment-repository-events-only.servertest.ts:24 
    process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #eae1106833315ce0 — Environment-variable access.
repo/web/src/__tests__/server/repositories/environment-repository-events-only.servertest.ts:25 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "events_only";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #55cd35f0ffe9abb5 — Environment-variable access.
repo/web/src/__tests__/server/repositories/environment-repository-events-only.servertest.ts:28 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ae552474b77cecaa — Environment-variable access.
repo/web/src/__tests__/server/repositories/environment-repository.servertest.ts:12 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "legacy";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #45480650143a7316 — Environment-variable access.
repo/web/src/__tests__/server/scores-trpc-events-only.servertest.ts:26 
    process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e33dd046a8502024 — Environment-variable access.
repo/web/src/__tests__/server/scores-trpc-events-only.servertest.ts:27 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "events_only";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0577e1be71801e61 — Environment-variable access.
repo/web/src/__tests__/server/scores-trpc-events-only.servertest.ts:30 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #70eb830d666b1a5b — Environment-variable access.
repo/web/src/__tests__/server/sessions-observations-io-cap.servertest.ts:29 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3de9b021bf16ba81 — Environment-variable access.
repo/web/src/__tests__/server/sessions-trpc-events-only.servertest.ts:24 
    process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ce808b4bce1cc3e7 — Environment-variable access.
repo/web/src/__tests__/server/sessions-trpc-events-only.servertest.ts:25 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "events_only";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f7502594ebe0be19 — Environment-variable access.
repo/web/src/__tests__/server/sessions-trpc-events-only.servertest.ts:28 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #14aa4b6da11ab0c0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/server/slack-integration.servertest.ts:510 
      const response = await fetch(
        `http://localhost:3000/api/public/slack/install?projectId=${project.id}`,
        {
          method: "GET",
          headers: {
            Accept: "application/json",
          },
          // No cookies/session - simulating unauthenticated request
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #c11d3b984cb8f8d1 — Environment-variable access.
repo/web/src/__tests__/server/traces-trpc-events-only.servertest.ts:25 
    process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #28645cc3d19f40a3 — Environment-variable access.
repo/web/src/__tests__/server/traces-trpc-events-only.servertest.ts:26 
  process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE = "events_only";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #48a8eecdac7a93c7 — Environment-variable access.
repo/web/src/__tests__/server/traces-trpc-events-only.servertest.ts:29 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #79473a37c6751712 — Environment-variable access.
repo/web/src/__tests__/server/unit/blobStorageKey.servertest.ts:170 
  const envPrefix = process.env.LANGFUSE_S3_EVENT_UPLOAD_PREFIX ?? "";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e627acf825368e3f — Environment-variable access.
repo/web/src/__tests__/server/unit/blobStorageKey.servertest.ts:252 
  const envPrefix = process.env.LANGFUSE_S3_EVENT_UPLOAD_PREFIX ?? "";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bc91cbf5ed9e08e7 — Environment-variable access.
repo/web/src/__tests__/server/unit/code-eval-capabilities.servertest.ts:11 
  delete process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e07c2657479f4199 — Environment-variable access.
repo/web/src/__tests__/server/unit/code-eval-capabilities.servertest.ts:12 
  delete process.env.LANGFUSE_CODE_EVAL_DISPATCHER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d7ed7da0b288c00c — Environment-variable access.
repo/web/src/__tests__/server/unit/code-eval-capabilities.servertest.ts:16 
      delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #71e12317af5da2b2 — Environment-variable access.
repo/web/src/__tests__/server/unit/code-eval-capabilities.servertest.ts:18 
      process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #21c4d67fee2a7520 — Filesystem access.
repo/web/src/__tests__/server/unit/code-eval-python-runner-contract.servertest.ts:1 
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ed27b3f7154b7ecb — Filesystem access.
repo/web/src/__tests__/server/unit/code-eval-python-runner-contract.servertest.ts:14 
    const runnerSource = readFileSync(
      path.join(
        __dirname,
        "../../../../..",
        "scripts/code-eval-runners/python/code_based_eval_handler.py",
      ),
      "utf8",
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6f08881431fee776 — Environment-variable access.
repo/web/src/__tests__/server/unit/evaluator-preflight.servertest.ts:44 
    process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #63d46f4f632c991e — Environment-variable access.
repo/web/src/__tests__/server/unit/evaluator-preflight.servertest.ts:48 
    delete process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c0378e73d9547abb — Environment-variable access.
repo/web/src/__tests__/server/unit/evaluator-preflight.servertest.ts:68 
      delete process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7a7223bbc33fe44a — Environment-variable access.
repo/web/src/__tests__/server/unit/evaluator-preflight.servertest.ts:72 
    process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3c99270773a1270a — Environment-variable access.
repo/web/src/__tests__/server/unit/evaluator-preflight.servertest.ts:96 
    process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #aa52053615d7a8b8 — Environment-variable access.
repo/web/src/__tests__/server/unit/sfdc-sync.servertest.ts:529 
  const originalRegion = process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c4cc75c9af15f4b0 — Environment-variable access.
repo/web/src/__tests__/server/unit/sfdc-sync.servertest.ts:531 
    process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION = "STAGING";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6282ac3a82f94edc — Environment-variable access.
repo/web/src/__tests__/server/unit/sfdc-sync.servertest.ts:535 
      delete process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5394953d365be95d — Environment-variable access.
repo/web/src/__tests__/server/unit/sfdc-sync.servertest.ts:537 
      process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION = originalRegion;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #c213167804c79c7a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/__tests__/test-utils.ts:152 
  const response = await fetch(finalUrl, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #1ad296f4ee2f4547 — Environment-variable access.
repo/web/src/__tests__/vitest-test-db-setup.ts:26 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ce96e5cd5216b4bf — Environment-variable access.
repo/web/src/__tests__/vitest-test-db-setup.ts:30 
    process.env.NODE_ENV !== "test"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #02288e9a14ed9593 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/components/layouts/app-layout/variants/AuthenticatedLayout.tsx:220 
    fetch(`/api/project/${encodeURIComponent(projectId)}/visit`, {
      method: "POST",
    }).catch(() => {});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #80676034eddd5500 — Environment-variable access.
repo/web/src/components/table/peek/hooks/usePeekNavigation.ts:214 
        const pathnameWithBasePath = `${process.env.NEXT_PUBLIC_BASE_PATH ?? ""}${pathnameWithQuery}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #b25c121ac14c95b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/components/trace/lib/download-trace.ts:51 
  const response = await fetch(buildTraceDownloadUrl({ traceId, projectId }), {
    method: "GET",
    credentials: "same-origin",
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7f76febe5e612536 — Environment-variable access.
repo/web/src/components/ui/AdvancedJsonViewer/utils/debug.ts:8 
const DEBUG = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a0b79fd6dc88e79 — Environment-variable access.
repo/web/src/ee/features/in-app-agent/server/agent.ts:193 
    process.env.AWS_PROFILE ?? params.options.awsBedrock.profile;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1ccbca9ce11970ba — Hardcoded external endpoint. Review what data is sent to this destination.
repo/web/src/ee/features/in-app-agent/server/agent.ts:751 
        url: new URL(LANGFUSE_DOCS_MCP_URL),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #6f9905ffb9ca0860 — Filesystem access.
repo/web/src/ee/features/in-app-agent/server/agent.ts:1245 
    const promptTemplate = await readFile(
      path.join(
        LOCAL_IN_APP_AGENT_SYSTEM_PROMPT_DIR,
        `${IN_APP_AGENT_SYSTEM_PROMPT_NAME}.txt`,
      ),
      "utf8",
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #bb238154cd63c6ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/ee/features/in-app-agent/server/sandbox/providers/lambdaMicrovm.ts:199 
    const response = await fetch(
      `${normalizeEndpoint(session.endpoint)}/sandbox`,
      {
        method: "POST",
        headers: {
          "Content-Type": "application/json",
          "X-aws-proxy-port": String(DEFAULT_SANDBOX_SERVER_PORT),
          "X-aws-proxy-auth": session.authToken.value,
        },
        body: JSON.stringify({
          ...operation,
          toolCallFiles: session.toolCallFiles,
        }),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #cf3a86717b51ce1b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/ee/features/in-app-agent/server/sandbox/providers/lambdaMicrovm.ts:366 
      const response = await fetch(
        `${normalizeEndpoint(params.endpoint)}/health`,
        {
          headers: {
            "X-aws-proxy-port": String(DEFAULT_SANDBOX_SERVER_PORT),
            "X-aws-proxy-auth": (await createMicrovmAuthToken(params)).value,
          },
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #fd202ae07c8ceee4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/ee/features/multi-tenant-sso/validateSsoConfig.ts:103 
    resp = await fetch(discoveryUrl, {
      signal: AbortSignal.timeout(DISCOVERY_TIMEOUT_MS),
      redirect: "error",
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #58f08c7ba59d5272 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/ee/features/sfdc-sync/server/sfdcService.ts:453 
      const response = await fetch(url, {
        method: "POST",
        headers: {
          "Content-Type": "application/json",
          Authorization: this.config.basicAuthHeader,
        },
        body: JSON.stringify(payload),
        signal: controller.signal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #201aebb7c6d811bb — Environment-variable access.
repo/web/src/env.mjs:50 
      process.env.NODE_ENV === "production"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #556539003b677957 — Environment-variable access.
repo/web/src/env.mjs:58 
        process.env.VERCEL_URL && process.env.VERCEL_URL !== ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d77a4fa67a12c538 — Environment-variable access.
repo/web/src/env.mjs:59 
          ? process.env.VERCEL_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd756e1e7b926503 — Environment-variable access.
repo/web/src/env.mjs:62 
      process.env.VERCEL ? z.string().min(1) : z.url(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f9a6997d1334c9a — Environment-variable access.
repo/web/src/env.mjs:553 
    SEED_SECRET_KEY: process.env.SEED_SECRET_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b8bda1f58d517db — Environment-variable access.
repo/web/src/env.mjs:554 
    NEXT_PUBLIC_DEMO_PROJECT_ID: process.env.NEXT_PUBLIC_DEMO_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #326b7c10d03682e7 — Environment-variable access.
repo/web/src/env.mjs:555 
    NEXT_PUBLIC_DEMO_ORG_ID: process.env.NEXT_PUBLIC_DEMO_ORG_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4b2b9dcef2304b9 — Environment-variable access.
repo/web/src/env.mjs:556 
    DATABASE_URL: process.env.DATABASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c206fefd27a325b8 — Environment-variable access.
repo/web/src/env.mjs:557 
    NODE_ENV: process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c656ad2d8a1957d — Environment-variable access.
repo/web/src/env.mjs:558 
    BUILD_ID: process.env.BUILD_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e219b3110b04c12 — Environment-variable access.
repo/web/src/env.mjs:559 
    NEXT_PUBLIC_BUILD_ID: process.env.NEXT_PUBLIC_BUILD_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5c5133badbc826b — Environment-variable access.
repo/web/src/env.mjs:560 
    NEXTAUTH_SECRET: process.env.NEXTAUTH_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6091c5035aff3835 — Environment-variable access.
repo/web/src/env.mjs:561 
    NEXTAUTH_COOKIE_DOMAIN: process.env.NEXTAUTH_COOKIE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #877c2468e5e85091 — Environment-variable access.
repo/web/src/env.mjs:562 
    NEXTAUTH_COOKIE_NAME_SUFFIX: process.env.NEXTAUTH_COOKIE_NAME_SUFFIX,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #812815cf151675a4 — Environment-variable access.
repo/web/src/env.mjs:563 
    NEXTAUTH_URL: process.env.NEXTAUTH_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98fde6f24bb73a75 — Environment-variable access.
repo/web/src/env.mjs:564 
    LANGFUSE_MCP_ALLOWED_HOSTS: process.env.LANGFUSE_MCP_ALLOWED_HOSTS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b89c095c5a34875 — Environment-variable access.
repo/web/src/env.mjs:566 
      process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec615e2dbc3c497f — Environment-variable access.
repo/web/src/env.mjs:568 
      process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORT_CUTOFF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ceaaac40f1f9722 — Environment-variable access.
repo/web/src/env.mjs:570 
      process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORTER_CUTOFF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99d6e910a4398d29 — Environment-variable access.
repo/web/src/env.mjs:571 
    NEXT_PUBLIC_SIGN_UP_DISABLED: process.env.NEXT_PUBLIC_SIGN_UP_DISABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28a513f2bab7f0d7 — Environment-variable access.
repo/web/src/env.mjs:573 
      process.env.LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08c06f58d9875f85 — Environment-variable access.
repo/web/src/env.mjs:574 
    AWS_ACCESS_KEY_ID: process.env.AWS_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b67e8def7294dbd1 — Environment-variable access.
repo/web/src/env.mjs:575 
    AWS_SECRET_ACCESS_KEY: process.env.AWS_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10e3d45ad78a4670 — Environment-variable access.
repo/web/src/env.mjs:576 
    LANGFUSE_AWS_BEDROCK_REGION: process.env.LANGFUSE_AWS_BEDROCK_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e95f5bad3d46e78 — Environment-variable access.
repo/web/src/env.mjs:578 
      process.env.LANGFUSE_IN_APP_AGENT_AWS_PROFILE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cef431065cc2d421 — Environment-variable access.
repo/web/src/env.mjs:580 
      process.env.LANGFUSE_IN_APP_AGENT_SANDBOX_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6de738151a6a38a — Environment-variable access.
repo/web/src/env.mjs:582 
      process.env
        .LANGFUSE_IN_APP_AGENT_SANDBOX_AWS_LAMBDA_MICROVM_IMAGE_IDENTIFIER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cb0212f62f61d4f — Environment-variable access.
repo/web/src/env.mjs:585 
      process.env
        .LANGFUSE_IN_APP_AGENT_SANDBOX_AWS_LAMBDA_MICROVM_EXECUTION_ROLE_ARN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cde03f91d0f1df62 — Environment-variable access.
repo/web/src/env.mjs:588 
      process.env
        .LANGFUSE_IN_APP_AGENT_SANDBOX_AWS_LAMBDA_MICROVM_EGRESS_NETWORK_CONNECTOR_ARN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bab82731870a25e5 — Environment-variable access.
repo/web/src/env.mjs:591 
      process.env.LANGFUSE_IN_APP_AGENT_SANDBOX_AWS_LAMBDA_MICROVM_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d31909196726e4b — Environment-variable access.
repo/web/src/env.mjs:592 
    LANGFUSE_TEAM_SLACK_WEBHOOK: process.env.LANGFUSE_TEAM_SLACK_WEBHOOK,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de92192443b1174b — Environment-variable access.
repo/web/src/env.mjs:594 
      process.env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b9aae39a1f54a74 — Environment-variable access.
repo/web/src/env.mjs:595 
    LANGFUSE_ADMIN_ACCESS_WEBHOOK: process.env.LANGFUSE_ADMIN_ACCESS_WEBHOOK,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d65c489b1897ad4 — Environment-variable access.
repo/web/src/env.mjs:596 
    MULESOFT_SFDC_USER_URL: process.env.MULESOFT_SFDC_USER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d6647b2f04d6817 — Environment-variable access.
repo/web/src/env.mjs:597 
    MULESOFT_SFDC_ORG_URL: process.env.MULESOFT_SFDC_ORG_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0981d56e5659ffe — Environment-variable access.
repo/web/src/env.mjs:598 
    MULESOFT_SFDC_BASIC_AUTH_USER: process.env.MULESOFT_SFDC_BASIC_AUTH_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #317ad2e327645a38 — Environment-variable access.
repo/web/src/env.mjs:600 
      process.env.MULESOFT_SFDC_BASIC_AUTH_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #564266aeac0fa6b5 — Environment-variable access.
repo/web/src/env.mjs:602 
      process.env.MULESOFT_SFDC_DEFAULT_COMPANY_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb58da3383209a4e — Environment-variable access.
repo/web/src/env.mjs:604 
      process.env.MULESOFT_SFDC_REQUEST_TIMEOUT_MS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f73312c1cea275f7 — Environment-variable access.
repo/web/src/env.mjs:605 
    SALT: process.env.SALT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9998570221aad51a — Environment-variable access.
repo/web/src/env.mjs:606 
    LANGFUSE_CSP_ENFORCE_HTTPS: process.env.LANGFUSE_CSP_ENFORCE_HTTPS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fac182946ee475dc — Environment-variable access.
repo/web/src/env.mjs:607 
    TELEMETRY_ENABLED: process.env.TELEMETRY_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21b4e82e0a88b1aa — Environment-variable access.
repo/web/src/env.mjs:609 
    LANGFUSE_DEFAULT_ORG_ID: process.env.LANGFUSE_DEFAULT_ORG_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be9b043f15d3e04f — Environment-variable access.
repo/web/src/env.mjs:610 
    LANGFUSE_DEFAULT_ORG_ROLE: process.env.LANGFUSE_DEFAULT_ORG_ROLE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fb2d7588e3f5751 — Environment-variable access.
repo/web/src/env.mjs:611 
    LANGFUSE_DEFAULT_PROJECT_ID: process.env.LANGFUSE_DEFAULT_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1e84be965ad76b5 — Environment-variable access.
repo/web/src/env.mjs:612 
    LANGFUSE_DEFAULT_PROJECT_ROLE: process.env.LANGFUSE_DEFAULT_PROJECT_ROLE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3686e83ac9ea7af — Environment-variable access.
repo/web/src/env.mjs:614 
    AUTH_GOOGLE_CLIENT_ID: process.env.AUTH_GOOGLE_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b35e72cf638dc6b — Environment-variable access.
repo/web/src/env.mjs:615 
    AUTH_GOOGLE_CLIENT_SECRET: process.env.AUTH_GOOGLE_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a9ee1fe2662cca6 — Environment-variable access.
repo/web/src/env.mjs:616 
    AUTH_GOOGLE_ALLOWED_DOMAINS: process.env.AUTH_GOOGLE_ALLOWED_DOMAINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #396dbdff63be0e88 — Environment-variable access.
repo/web/src/env.mjs:618 
      process.env.AUTH_GOOGLE_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61fa2d318b7f86c4 — Environment-variable access.
repo/web/src/env.mjs:619 
    AUTH_GOOGLE_CLIENT_AUTH_METHOD: process.env.AUTH_GOOGLE_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4425e6aa7939be2d — Environment-variable access.
repo/web/src/env.mjs:620 
    AUTH_GOOGLE_CHECKS: process.env.AUTH_GOOGLE_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a4a38e29e8ca6b0 — Environment-variable access.
repo/web/src/env.mjs:622 
      process.env.AUTH_GOOGLE_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ade28cc95c294a89 — Environment-variable access.
repo/web/src/env.mjs:623 
    AUTH_GITHUB_CLIENT_ID: process.env.AUTH_GITHUB_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b958ed99629ee00 — Environment-variable access.
repo/web/src/env.mjs:624 
    AUTH_GITHUB_CLIENT_SECRET: process.env.AUTH_GITHUB_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c899f7fa95b0ef0d — Environment-variable access.
repo/web/src/env.mjs:626 
      process.env.AUTH_GITHUB_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b58559e8b5b527d — Environment-variable access.
repo/web/src/env.mjs:627 
    AUTH_GITHUB_CLIENT_AUTH_METHOD: process.env.AUTH_GITHUB_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a86d4da7a92cb4fa — Environment-variable access.
repo/web/src/env.mjs:628 
    AUTH_GITHUB_CHECKS: process.env.AUTH_GITHUB_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f780b2771bbcb0d — Environment-variable access.
repo/web/src/env.mjs:630 
      process.env.AUTH_GITHUB_ENTERPRISE_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a33479a1231c0b21 — Environment-variable access.
repo/web/src/env.mjs:632 
      process.env.AUTH_GITHUB_ENTERPRISE_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2502f3ae0e77f138 — Environment-variable access.
repo/web/src/env.mjs:634 
      process.env.AUTH_GITHUB_ENTERPRISE_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1c9fe1d2c65a247 — Environment-variable access.
repo/web/src/env.mjs:636 
      process.env.AUTH_GITHUB_ENTERPRISE_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #208e8603f8f04050 — Environment-variable access.
repo/web/src/env.mjs:638 
      process.env.AUTH_GITHUB_ENTERPRISE_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b48c418a7bbcd5c — Environment-variable access.
repo/web/src/env.mjs:639 
    AUTH_GITHUB_ENTERPRISE_CHECKS: process.env.AUTH_GITHUB_ENTERPRISE_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a629ee8af74abab — Environment-variable access.
repo/web/src/env.mjs:640 
    AUTH_GITLAB_ISSUER: process.env.AUTH_GITLAB_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8e8c65446bedafb — Environment-variable access.
repo/web/src/env.mjs:641 
    AUTH_GITLAB_CLIENT_ID: process.env.AUTH_GITLAB_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e16fca81b35c75d — Environment-variable access.
repo/web/src/env.mjs:642 
    AUTH_GITLAB_CLIENT_SECRET: process.env.AUTH_GITLAB_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9ffb35bed33cc13 — Environment-variable access.
repo/web/src/env.mjs:644 
      process.env.AUTH_GITLAB_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8ab7227761ff71a — Environment-variable access.
repo/web/src/env.mjs:645 
    AUTH_GITLAB_CLIENT_AUTH_METHOD: process.env.AUTH_GITLAB_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d66f2fea984db509 — Environment-variable access.
repo/web/src/env.mjs:646 
    AUTH_GITLAB_CHECKS: process.env.AUTH_GITLAB_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6abfbe76b7fa2d7 — Environment-variable access.
repo/web/src/env.mjs:648 
      process.env.AUTH_GITLAB_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #158c4c6d1eb4a67c — Environment-variable access.
repo/web/src/env.mjs:649 
    AUTH_GITLAB_URL: process.env.AUTH_GITLAB_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3459664adc1cf8a — Environment-variable access.
repo/web/src/env.mjs:650 
    AUTH_AZURE_AD_CLIENT_ID: process.env.AUTH_AZURE_AD_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eae92a7f2726240d — Environment-variable access.
repo/web/src/env.mjs:651 
    AUTH_AZURE_AD_CLIENT_SECRET: process.env.AUTH_AZURE_AD_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86acff6823268306 — Environment-variable access.
repo/web/src/env.mjs:652 
    AUTH_AZURE_AD_TENANT_ID: process.env.AUTH_AZURE_AD_TENANT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #106812a444d320e9 — Environment-variable access.
repo/web/src/env.mjs:654 
      process.env.AUTH_AZURE_AD_ALLOW_ACCOUNT_LINKING ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #084f5d6d3b2df968 — Environment-variable access.
repo/web/src/env.mjs:655 
      process.env.AUTH_AZURE_ALLOW_ACCOUNT_LINKING, // fallback on old env var

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #144e439ebdf2b92d — Environment-variable access.
repo/web/src/env.mjs:657 
      process.env.AUTH_AZURE_AD_CLIENT_AUTH_METHOD ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25a38c9061342add — Environment-variable access.
repo/web/src/env.mjs:658 
      process.env.AUTH_AZURE_CLIENT_AUTH_METHOD, // fallback on old env var

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f16103e4d66d8d7a — Environment-variable access.
repo/web/src/env.mjs:660 
      process.env.AUTH_AZURE_AD_CHECKS ?? process.env.AUTH_AZURE_CHECKS, // fallback on old env var

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe0ea600a7abccc6 — Environment-variable access.
repo/web/src/env.mjs:662 
      process.env.AUTH_AZURE_AD_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e90f7fc3ccf15574 — Environment-variable access.
repo/web/src/env.mjs:663 
    AUTH_OKTA_CLIENT_ID: process.env.AUTH_OKTA_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ca83c646147a359 — Environment-variable access.
repo/web/src/env.mjs:664 
    AUTH_OKTA_CLIENT_SECRET: process.env.AUTH_OKTA_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e74ade36f5ac2690 — Environment-variable access.
repo/web/src/env.mjs:665 
    AUTH_OKTA_ISSUER: process.env.AUTH_OKTA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #616f72a45713e26b — Environment-variable access.
repo/web/src/env.mjs:667 
      process.env.AUTH_OKTA_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58c585c5696e463f — Environment-variable access.
repo/web/src/env.mjs:668 
    AUTH_OKTA_CLIENT_AUTH_METHOD: process.env.AUTH_OKTA_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #311a16173bbd0b92 — Environment-variable access.
repo/web/src/env.mjs:669 
    AUTH_OKTA_CHECKS: process.env.AUTH_OKTA_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da48a5e7bd6c88b3 — Environment-variable access.
repo/web/src/env.mjs:671 
      process.env.AUTH_OKTA_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a5428e56d23b8bc — Environment-variable access.
repo/web/src/env.mjs:672 
    AUTH_AUTHENTIK_CLIENT_ID: process.env.AUTH_AUTHENTIK_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #328004d3a066fc89 — Environment-variable access.
repo/web/src/env.mjs:673 
    AUTH_AUTHENTIK_CLIENT_SECRET: process.env.AUTH_AUTHENTIK_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9243daa0bc454593 — Environment-variable access.
repo/web/src/env.mjs:674 
    AUTH_AUTHENTIK_ISSUER: process.env.AUTH_AUTHENTIK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f13877456388b4b — Environment-variable access.
repo/web/src/env.mjs:676 
      process.env.AUTH_AUTHENTIK_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0143a60203f14e64 — Environment-variable access.
repo/web/src/env.mjs:678 
      process.env.AUTH_AUTHENTIK_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac85ac0d5f407bf8 — Environment-variable access.
repo/web/src/env.mjs:679 
    AUTH_AUTHENTIK_CHECKS: process.env.AUTH_AUTHENTIK_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc5681d53abbcc22 — Environment-variable access.
repo/web/src/env.mjs:681 
      process.env.AUTH_AUTHENTIK_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #583861ea3e5334d6 — Environment-variable access.
repo/web/src/env.mjs:683 
      process.env.AUTH_AUTHENTIK_AUTHORIZATION_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d6e1491f0064688 — Environment-variable access.
repo/web/src/env.mjs:684 
    AUTH_ONELOGIN_CLIENT_ID: process.env.AUTH_ONELOGIN_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8f55fd067692475 — Environment-variable access.
repo/web/src/env.mjs:685 
    AUTH_ONELOGIN_CLIENT_SECRET: process.env.AUTH_ONELOGIN_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8221b342d0d4d088 — Environment-variable access.
repo/web/src/env.mjs:686 
    AUTH_ONELOGIN_ISSUER: process.env.AUTH_ONELOGIN_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e0b4b6d86522877 — Environment-variable access.
repo/web/src/env.mjs:688 
      process.env.AUTH_ONELOGIN_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52dbd8b8a7064e5a — Environment-variable access.
repo/web/src/env.mjs:690 
      process.env.AUTH_ONELOGIN_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc61e178adb422c2 — Environment-variable access.
repo/web/src/env.mjs:691 
    AUTH_ONELOGIN_CHECKS: process.env.AUTH_ONELOGIN_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62386741fc54cd16 — Environment-variable access.
repo/web/src/env.mjs:693 
      process.env.AUTH_ONELOGIN_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53acf52992ea283a — Environment-variable access.
repo/web/src/env.mjs:694 
    AUTH_AUTH0_CLIENT_ID: process.env.AUTH_AUTH0_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0ed2cb0968b0998 — Environment-variable access.
repo/web/src/env.mjs:695 
    AUTH_AUTH0_CLIENT_SECRET: process.env.AUTH_AUTH0_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #131fdd81c5618e7f — Environment-variable access.
repo/web/src/env.mjs:696 
    AUTH_AUTH0_ISSUER: process.env.AUTH_AUTH0_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afe940ac7261c2c5 — Environment-variable access.
repo/web/src/env.mjs:698 
      process.env.AUTH_AUTH0_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df40db8b13f482d7 — Environment-variable access.
repo/web/src/env.mjs:699 
    AUTH_AUTH0_CLIENT_AUTH_METHOD: process.env.AUTH_AUTH0_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37903f2c05d098c2 — Environment-variable access.
repo/web/src/env.mjs:700 
    AUTH_AUTH0_CHECKS: process.env.AUTH_AUTH0_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4696f47b989264b — Environment-variable access.
repo/web/src/env.mjs:702 
      process.env.AUTH_AUTH0_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8053da1523853b34 — Environment-variable access.
repo/web/src/env.mjs:704 
      process.env.AUTH_CLICKHOUSE_CLOUD_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3abfcdedfbf7997 — Environment-variable access.
repo/web/src/env.mjs:706 
      process.env.AUTH_CLICKHOUSE_CLOUD_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdaef7f96cdb86ed — Environment-variable access.
repo/web/src/env.mjs:707 
    AUTH_CLICKHOUSE_CLOUD_ISSUER: process.env.AUTH_CLICKHOUSE_CLOUD_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4f17cd7b6b2aea1 — Environment-variable access.
repo/web/src/env.mjs:709 
      process.env.AUTH_CLICKHOUSE_CLOUD_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25bca8b828beec12 — Environment-variable access.
repo/web/src/env.mjs:711 
      process.env.AUTH_CLICKHOUSE_CLOUD_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cae4d28ac2169d2e — Environment-variable access.
repo/web/src/env.mjs:712 
    AUTH_CLICKHOUSE_CLOUD_CHECKS: process.env.AUTH_CLICKHOUSE_CLOUD_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fef84ea26df6be5c — Environment-variable access.
repo/web/src/env.mjs:714 
      process.env.AUTH_CLICKHOUSE_CLOUD_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c78a350a3e533240 — Environment-variable access.
repo/web/src/env.mjs:715 
    AUTH_COGNITO_CLIENT_ID: process.env.AUTH_COGNITO_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a056cb3d59d3298 — Environment-variable access.
repo/web/src/env.mjs:716 
    AUTH_COGNITO_CLIENT_SECRET: process.env.AUTH_COGNITO_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adb75fabb82de423 — Environment-variable access.
repo/web/src/env.mjs:717 
    AUTH_COGNITO_ISSUER: process.env.AUTH_COGNITO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2285152ff3dc730f — Environment-variable access.
repo/web/src/env.mjs:719 
      process.env.AUTH_COGNITO_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf933f140e541f9b — Environment-variable access.
repo/web/src/env.mjs:721 
      process.env.AUTH_COGNITO_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #332a52501b556950 — Environment-variable access.
repo/web/src/env.mjs:722 
    AUTH_COGNITO_CHECKS: process.env.AUTH_COGNITO_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d8e9521ae777c35 — Environment-variable access.
repo/web/src/env.mjs:724 
      process.env.AUTH_COGNITO_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea8ecdb49a1caba2 — Environment-variable access.
repo/web/src/env.mjs:725 
    AUTH_KEYCLOAK_CLIENT_ID: process.env.AUTH_KEYCLOAK_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad4898e775b092a5 — Environment-variable access.
repo/web/src/env.mjs:726 
    AUTH_KEYCLOAK_CLIENT_SECRET: process.env.AUTH_KEYCLOAK_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b454a4b19024cde — Environment-variable access.
repo/web/src/env.mjs:727 
    AUTH_KEYCLOAK_ISSUER: process.env.AUTH_KEYCLOAK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cada0bab9c2a7be — Environment-variable access.
repo/web/src/env.mjs:729 
      process.env.AUTH_KEYCLOAK_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7f5f58b5b10204c — Environment-variable access.
repo/web/src/env.mjs:731 
      process.env.AUTH_KEYCLOAK_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b9c169cceadb2ba — Environment-variable access.
repo/web/src/env.mjs:732 
    AUTH_KEYCLOAK_CHECKS: process.env.AUTH_KEYCLOAK_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2781793cf518f422 — Environment-variable access.
repo/web/src/env.mjs:734 
      process.env.AUTH_KEYCLOAK_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f73cefc1476c3a3 — Environment-variable access.
repo/web/src/env.mjs:735 
    AUTH_KEYCLOAK_SCOPE: process.env.AUTH_KEYCLOAK_SCOPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8e31b21437b5cf0 — Environment-variable access.
repo/web/src/env.mjs:736 
    AUTH_KEYCLOAK_ID_TOKEN: process.env.AUTH_KEYCLOAK_ID_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bcc490348a1ccb7 — Environment-variable access.
repo/web/src/env.mjs:737 
    AUTH_KEYCLOAK_NAME: process.env.AUTH_KEYCLOAK_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ebf774d20fcd20e5 — Environment-variable access.
repo/web/src/env.mjs:738 
    AUTH_JUMPCLOUD_CLIENT_ID: process.env.AUTH_JUMPCLOUD_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fe1ce16643c0952 — Environment-variable access.
repo/web/src/env.mjs:739 
    AUTH_JUMPCLOUD_CLIENT_SECRET: process.env.AUTH_JUMPCLOUD_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d52053c53b8011d0 — Environment-variable access.
repo/web/src/env.mjs:740 
    AUTH_JUMPCLOUD_ISSUER: process.env.AUTH_JUMPCLOUD_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc3b7d470b8cfff7 — Environment-variable access.
repo/web/src/env.mjs:742 
      process.env.AUTH_JUMPCLOUD_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9610b344a310768 — Environment-variable access.
repo/web/src/env.mjs:744 
      process.env.AUTH_JUMPCLOUD_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #262ccde1eccba6a6 — Environment-variable access.
repo/web/src/env.mjs:745 
    AUTH_JUMPCLOUD_CHECKS: process.env.AUTH_JUMPCLOUD_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3f4b2fc477f50f9 — Environment-variable access.
repo/web/src/env.mjs:747 
      process.env.AUTH_JUMPCLOUD_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cffca762264f20ac — Environment-variable access.
repo/web/src/env.mjs:748 
    AUTH_JUMPCLOUD_SCOPE: process.env.AUTH_JUMPCLOUD_SCOPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc0cd564efaba15c — Environment-variable access.
repo/web/src/env.mjs:749 
    AUTH_CUSTOM_CLIENT_ID: process.env.AUTH_CUSTOM_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7898126780650fdb — Environment-variable access.
repo/web/src/env.mjs:750 
    AUTH_CUSTOM_CLIENT_SECRET: process.env.AUTH_CUSTOM_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aec780fbcba32850 — Environment-variable access.
repo/web/src/env.mjs:751 
    AUTH_CUSTOM_ISSUER: process.env.AUTH_CUSTOM_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf9933a1c2cd26e2 — Environment-variable access.
repo/web/src/env.mjs:752 
    AUTH_CUSTOM_NAME: process.env.AUTH_CUSTOM_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f38076bc54692ea — Environment-variable access.
repo/web/src/env.mjs:753 
    AUTH_CUSTOM_SCOPE: process.env.AUTH_CUSTOM_SCOPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6fca0de62afcbb5a — Environment-variable access.
repo/web/src/env.mjs:754 
    AUTH_CUSTOM_CLIENT_AUTH_METHOD: process.env.AUTH_CUSTOM_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e49871f6b1ed7e72 — Environment-variable access.
repo/web/src/env.mjs:755 
    AUTH_CUSTOM_CHECKS: process.env.AUTH_CUSTOM_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #612d1961a3f32781 — Environment-variable access.
repo/web/src/env.mjs:757 
      process.env.AUTH_CUSTOM_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19c658524fcd7d9f — Environment-variable access.
repo/web/src/env.mjs:759 
      process.env.AUTH_CUSTOM_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0147e1e032d2563 — Environment-variable access.
repo/web/src/env.mjs:760 
    AUTH_CUSTOM_ID_TOKEN: process.env.AUTH_CUSTOM_ID_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0fa90e290d07f63 — Environment-variable access.
repo/web/src/env.mjs:761 
    AUTH_WORKOS_CLIENT_ID: process.env.AUTH_WORKOS_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a156762927e7d48 — Environment-variable access.
repo/web/src/env.mjs:762 
    AUTH_WORKOS_CLIENT_SECRET: process.env.AUTH_WORKOS_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b611c7035ca9efa — Environment-variable access.
repo/web/src/env.mjs:764 
      process.env.AUTH_WORKOS_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bc200cabcb054af — Environment-variable access.
repo/web/src/env.mjs:765 
    AUTH_WORKOS_ORGANIZATION_ID: process.env.AUTH_WORKOS_ORGANIZATION_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f08e832ceda4769 — Environment-variable access.
repo/web/src/env.mjs:766 
    AUTH_WORKOS_CONNECTION_ID: process.env.AUTH_WORKOS_CONNECTION_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c701519293c74a75 — Environment-variable access.
repo/web/src/env.mjs:767 
    AUTH_WORDPRESS_CLIENT_ID: process.env.AUTH_WORDPRESS_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #415928071a8a94a7 — Environment-variable access.
repo/web/src/env.mjs:768 
    AUTH_WORDPRESS_CLIENT_SECRET: process.env.AUTH_WORDPRESS_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2797e50bcac4dbc4 — Environment-variable access.
repo/web/src/env.mjs:770 
      process.env.AUTH_WORDPRESS_ALLOW_ACCOUNT_LINKING,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #045d795cdca2dc98 — Environment-variable access.
repo/web/src/env.mjs:772 
      process.env.AUTH_WORDPRESS_CLIENT_AUTH_METHOD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9b08ef185df03fa — Environment-variable access.
repo/web/src/env.mjs:773 
    AUTH_WORDPRESS_CHECKS: process.env.AUTH_WORDPRESS_CHECKS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d892c6dbd72795a4 — Environment-variable access.
repo/web/src/env.mjs:775 
      process.env.AUTH_WORDPRESS_ID_TOKEN_SIGNED_RESPONSE_ALG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19afb6f681d282ff — Environment-variable access.
repo/web/src/env.mjs:776 
    AUTH_IGNORE_ACCOUNT_FIELDS: process.env.AUTH_IGNORE_ACCOUNT_FIELDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dace36a3c6228797 — Environment-variable access.
repo/web/src/env.mjs:778 
      process.env.AUTH_DOMAINS_WITH_SSO_ENFORCEMENT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40868f8254fcac7b — Environment-variable access.
repo/web/src/env.mjs:779 
    AUTH_DISABLE_USERNAME_PASSWORD: process.env.AUTH_DISABLE_USERNAME_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c232e9db0e0f92b5 — Environment-variable access.
repo/web/src/env.mjs:780 
    AUTH_DISABLE_SIGNUP: process.env.AUTH_DISABLE_SIGNUP,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42c70ec4e952cc3c — Environment-variable access.
repo/web/src/env.mjs:782 
      process.env.AUTH_EMAIL_VERIFICATION_REQUIRED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d20083f172811a05 — Environment-variable access.
repo/web/src/env.mjs:783 
    AUTH_SESSION_MAX_AGE: process.env.AUTH_SESSION_MAX_AGE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33134ae503ca382e — Environment-variable access.
repo/web/src/env.mjs:784 
    AUTH_HTTP_PROXY: process.env.AUTH_HTTP_PROXY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5d7a8d7023920f2 — Environment-variable access.
repo/web/src/env.mjs:785 
    AUTH_HTTPS_PROXY: process.env.AUTH_HTTPS_PROXY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40e3a1b4769986ac — Environment-variable access.
repo/web/src/env.mjs:786 
    AUTH_SSO_TIMEOUT: process.env.AUTH_SSO_TIMEOUT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ca0bc2577f4c202 — Environment-variable access.
repo/web/src/env.mjs:788 
    EMAIL_FROM_ADDRESS: process.env.EMAIL_FROM_ADDRESS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5baaf0baea06f43f — Environment-variable access.
repo/web/src/env.mjs:789 
    SMTP_CONNECTION_URL: process.env.SMTP_CONNECTION_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f9062a1b042eb63 — Environment-variable access.
repo/web/src/env.mjs:791 
    OTEL_EXPORTER_OTLP_ENDPOINT: process.env.OTEL_EXPORTER_OTLP_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #743f63c985129c23 — Environment-variable access.
repo/web/src/env.mjs:792 
    OTEL_SERVICE_NAME: process.env.OTEL_SERVICE_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0999ff5500e8a0d1 — Environment-variable access.
repo/web/src/env.mjs:793 
    OTEL_TRACE_SAMPLING_RATIO: process.env.OTEL_TRACE_SAMPLING_RATIO,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #440fd5698211b204 — Environment-variable access.
repo/web/src/env.mjs:796 
      process.env.LANGFUSE_INGESTION_MASKING_PROPAGATED_HEADERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d304d4fe42fd368f — Environment-variable access.
repo/web/src/env.mjs:800 
      process.env.LANGFUSE_S3_MEDIA_MAX_CONTENT_LENGTH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfaf3d056ac03d32 — Environment-variable access.
repo/web/src/env.mjs:802 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_BUCKET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a9ff5b2c815cbdb — Environment-variable access.
repo/web/src/env.mjs:804 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_PREFIX,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9c84a293ac5f78e — Environment-variable access.
repo/web/src/env.mjs:806 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d3e227011557620 — Environment-variable access.
repo/web/src/env.mjs:808 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #659901bba82b8d83 — Environment-variable access.
repo/web/src/env.mjs:810 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c34d509a3e2a9163 — Environment-variable access.
repo/web/src/env.mjs:812 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7862a42ec610d677 — Environment-variable access.
repo/web/src/env.mjs:814 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_FORCE_PATH_STYLE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ce93c9ce7591c03 — Environment-variable access.
repo/web/src/env.mjs:816 
      process.env.LANGFUSE_S3_MEDIA_DOWNLOAD_URL_EXPIRY_SECONDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41955f91464b0c17 — Environment-variable access.
repo/web/src/env.mjs:817 
    LANGFUSE_S3_MEDIA_UPLOAD_SSE: process.env.LANGFUSE_S3_MEDIA_UPLOAD_SSE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc965005574e1e75 — Environment-variable access.
repo/web/src/env.mjs:819 
      process.env.LANGFUSE_S3_MEDIA_UPLOAD_SSE_KMS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fbf80a681736708 — Environment-variable access.
repo/web/src/env.mjs:821 
    NEXT_PUBLIC_POSTHOG_KEY: process.env.NEXT_PUBLIC_POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b9b1e56cd6cabd8 — Environment-variable access.
repo/web/src/env.mjs:822 
    NEXT_PUBLIC_POSTHOG_HOST: process.env.NEXT_PUBLIC_POSTHOG_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9a025bb06a3730d — Environment-variable access.
repo/web/src/env.mjs:824 
    NEXT_PUBLIC_PLAIN_APP_ID: process.env.NEXT_PUBLIC_PLAIN_APP_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #342257026beef224 — Environment-variable access.
repo/web/src/env.mjs:825 
    PLAIN_AUTHENTICATION_SECRET: process.env.PLAIN_AUTHENTICATION_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbcae047868956eb — Environment-variable access.
repo/web/src/env.mjs:826 
    PLAIN_CARDS_API_TOKEN: process.env.PLAIN_CARDS_API_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8bfb7194ee4fc82 — Environment-variable access.
repo/web/src/env.mjs:827 
    PYLON_API_KEY: process.env.PYLON_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8176805eee3d385d — Environment-variable access.
repo/web/src/env.mjs:829 
    CLICKHOUSE_URL: process.env.CLICKHOUSE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #296b7f38ddc0f154 — Environment-variable access.
repo/web/src/env.mjs:830 
    CLICKHOUSE_CLUSTER_NAME: process.env.CLICKHOUSE_CLUSTER_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8ade590f5b296d4 — Environment-variable access.
repo/web/src/env.mjs:831 
    CLICKHOUSE_DB: process.env.CLICKHOUSE_DB,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #866ffbafbddbb623 — Environment-variable access.
repo/web/src/env.mjs:832 
    CLICKHOUSE_USER: process.env.CLICKHOUSE_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a244f75d1c7cc56 — Environment-variable access.
repo/web/src/env.mjs:833 
    CLICKHOUSE_PASSWORD: process.env.CLICKHOUSE_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89bd2809b8b77582 — Environment-variable access.
repo/web/src/env.mjs:834 
    CLICKHOUSE_CLUSTER_ENABLED: process.env.CLICKHOUSE_CLUSTER_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88b82b516853fb2d — Environment-variable access.
repo/web/src/env.mjs:836 
    LANGFUSE_UI_API_HOST: process.env.LANGFUSE_UI_API_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05dd204a2a635bb4 — Environment-variable access.
repo/web/src/env.mjs:837 
    LANGFUSE_UI_DOCUMENTATION_HREF: process.env.LANGFUSE_UI_DOCUMENTATION_HREF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3a0f54d95a475fb — Environment-variable access.
repo/web/src/env.mjs:838 
    LANGFUSE_UI_SUPPORT_HREF: process.env.LANGFUSE_UI_SUPPORT_HREF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a4d4126d0808f4e — Environment-variable access.
repo/web/src/env.mjs:839 
    LANGFUSE_UI_FEEDBACK_HREF: process.env.LANGFUSE_UI_FEEDBACK_HREF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3aafea86cc97a21c — Environment-variable access.
repo/web/src/env.mjs:841 
      process.env.LANGFUSE_UI_LOGO_LIGHT_MODE_HREF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ab23ac7a7505ac2 — Environment-variable access.
repo/web/src/env.mjs:843 
      process.env.LANGFUSE_UI_LOGO_DARK_MODE_HREF,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3723cc0565b488ca — Environment-variable access.
repo/web/src/env.mjs:845 
      process.env.LANGFUSE_UI_DEFAULT_MODEL_ADAPTER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4cd0b43411768e6 — Environment-variable access.
repo/web/src/env.mjs:847 
      process.env.LANGFUSE_UI_DEFAULT_BASE_URL_OPENAI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #034ccdf51d2e10e0 — Environment-variable access.
repo/web/src/env.mjs:849 
      process.env.LANGFUSE_UI_DEFAULT_BASE_URL_ANTHROPIC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a86b180ed532db15 — Environment-variable access.
repo/web/src/env.mjs:851 
      process.env.LANGFUSE_UI_DEFAULT_BASE_URL_AZURE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31d791d9d89cd29c — Environment-variable access.
repo/web/src/env.mjs:853 
      process.env.LANGFUSE_UI_VISIBLE_PRODUCT_MODULES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d26d34d3b61d048a — Environment-variable access.
repo/web/src/env.mjs:855 
      process.env.LANGFUSE_UI_HIDDEN_PRODUCT_MODULES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f273082db01b2de5 — Environment-variable access.
repo/web/src/env.mjs:858 
      process.env.NEXT_PUBLIC_LANGFUSE_PLAYGROUND_STREAMING_ENABLED_DEFAULT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fd955f9393e990a — Environment-variable access.
repo/web/src/env.mjs:860 
    LANGFUSE_EE_LICENSE_KEY: process.env.LANGFUSE_EE_LICENSE_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ebfa8849c2e9c0e — Environment-variable access.
repo/web/src/env.mjs:861 
    ADMIN_API_KEY: process.env.ADMIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #439b35682a154af2 — Environment-variable access.
repo/web/src/env.mjs:862 
    ENCRYPTION_KEY: process.env.ENCRYPTION_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afdc0246997bd5da — Environment-variable access.
repo/web/src/env.mjs:864 
    LANGFUSE_CACHE_API_KEY_ENABLED: process.env.LANGFUSE_CACHE_API_KEY_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a102ab40fcd5bb2 — Environment-variable access.
repo/web/src/env.mjs:866 
      process.env.LANGFUSE_CACHE_API_KEY_TTL_SECONDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e8beb4f9a074e9a — Environment-variable access.
repo/web/src/env.mjs:868 
      process.env.LANGFUSE_ALLOWED_ORGANIZATION_CREATORS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #daa2581b034020a2 — Environment-variable access.
repo/web/src/env.mjs:869 
    STRIPE_SECRET_KEY: process.env.STRIPE_SECRET_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #505f0faaee091c77 — Environment-variable access.
repo/web/src/env.mjs:870 
    STRIPE_WEBHOOK_SIGNING_SECRET: process.env.STRIPE_WEBHOOK_SIGNING_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c85925d9ae46ad58 — Environment-variable access.
repo/web/src/env.mjs:871 
    SENTRY_AUTH_TOKEN: process.env.SENTRY_AUTH_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80c2b1dce0500978 — Environment-variable access.
repo/web/src/env.mjs:872 
    SENTRY_CSP_REPORT_URI: process.env.SENTRY_CSP_REPORT_URI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f2f37d63a92a5fb — Environment-variable access.
repo/web/src/env.mjs:873 
    LANGFUSE_RATE_LIMITS_ENABLED: process.env.LANGFUSE_RATE_LIMITS_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ad9c1d567863df5 — Environment-variable access.
repo/web/src/env.mjs:875 
    LANGFUSE_INIT_ORG_ID: process.env.LANGFUSE_INIT_ORG_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1f01c03f789144b — Environment-variable access.
repo/web/src/env.mjs:876 
    LANGFUSE_INIT_ORG_NAME: process.env.LANGFUSE_INIT_ORG_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eda6d1aeade9394b — Environment-variable access.
repo/web/src/env.mjs:877 
    LANGFUSE_INIT_ORG_CLOUD_PLAN: process.env.LANGFUSE_INIT_ORG_CLOUD_PLAN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bac421c3bff39f11 — Environment-variable access.
repo/web/src/env.mjs:878 
    LANGFUSE_INIT_PROJECT_ID: process.env.LANGFUSE_INIT_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e1fdf7d6502eaac — Environment-variable access.
repo/web/src/env.mjs:879 
    LANGFUSE_INIT_PROJECT_NAME: process.env.LANGFUSE_INIT_PROJECT_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a7c12db6506f241 — Environment-variable access.
repo/web/src/env.mjs:881 
      process.env.LANGFUSE_INIT_PROJECT_RETENTION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3108a666524d97f — Environment-variable access.
repo/web/src/env.mjs:883 
      process.env.LANGFUSE_INIT_PROJECT_PUBLIC_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f8b3ca6a367aef5 — Environment-variable access.
repo/web/src/env.mjs:885 
      process.env.LANGFUSE_INIT_PROJECT_SECRET_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #322a442b4bd123ff — Environment-variable access.
repo/web/src/env.mjs:886 
    LANGFUSE_INIT_USER_EMAIL: process.env.LANGFUSE_INIT_USER_EMAIL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #838d7a1ebd784be8 — Environment-variable access.
repo/web/src/env.mjs:887 
    LANGFUSE_INIT_USER_NAME: process.env.LANGFUSE_INIT_USER_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b8ad1db8ce69ba7 — Environment-variable access.
repo/web/src/env.mjs:888 
    LANGFUSE_INIT_USER_PASSWORD: process.env.LANGFUSE_INIT_USER_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ef8d381442d01bc — Environment-variable access.
repo/web/src/env.mjs:889 
    NEXT_PUBLIC_BASE_PATH: process.env.NEXT_PUBLIC_BASE_PATH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b3e2ab7735f4874 — Environment-variable access.
repo/web/src/env.mjs:891 
      process.env.LANGFUSE_MAX_HISTORIC_EVAL_CREATION_LIMIT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f93b20baaffc28b7 — Environment-variable access.
repo/web/src/env.mjs:892 
    SLACK_CLIENT_ID: process.env.SLACK_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9a55c7a0ab63182 — Environment-variable access.
repo/web/src/env.mjs:893 
    SLACK_CLIENT_SECRET: process.env.SLACK_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c54512620ed66098 — Environment-variable access.
repo/web/src/env.mjs:894 
    SLACK_STATE_SECRET: process.env.SLACK_STATE_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4633665bef015c4 — Environment-variable access.
repo/web/src/env.mjs:897 
    LANGFUSE_AWS_BEDROCK_MODEL: process.env.LANGFUSE_AWS_BEDROCK_MODEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8a2f2714ca69040 — Environment-variable access.
repo/web/src/env.mjs:899 
      process.env.LANGFUSE_AWS_BEDROCK_SMALL_MODEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5813df1ffe77a216 — Environment-variable access.
repo/web/src/env.mjs:902 
    LANGFUSE_AI_FEATURES_HOST: process.env.LANGFUSE_AI_FEATURES_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7822760a2424d77f — Environment-variable access.
repo/web/src/env.mjs:906 
      process.env.LANGFUSE_SKIP_FINAL_FOR_OTEL_PROJECTS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac8645f715bfe533 — Environment-variable access.
repo/web/src/env.mjs:910 
      process.env.LANGFUSE_AI_FEATURES_PUBLIC_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #924b61c5f977ca99 — Environment-variable access.
repo/web/src/env.mjs:912 
      process.env.LANGFUSE_AI_FEATURES_SECRET_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36f92b3aeb9fe0f3 — Environment-variable access.
repo/web/src/env.mjs:914 
      process.env.LANGFUSE_AI_FEATURES_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0b54e37722a4a7c — Environment-variable access.
repo/web/src/env.mjs:917 
      process.env.LANGFUSE_API_TRACES_DEFAULT_DATE_RANGE_DAYS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd1f10694b17f66f — Environment-variable access.
repo/web/src/env.mjs:919 
      process.env.LANGFUSE_API_TRACES_REJECT_NO_DATE_RANGE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27a02c393b0af06a — Environment-variable access.
repo/web/src/env.mjs:921 
      process.env.LANGFUSE_API_TRACES_DEFAULT_FIELDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #342e54b5677a9719 — Environment-variable access.
repo/web/src/env.mjs:923 
      process.env.LANGFUSE_API_TRACEBYID_DEFAULT_FIELDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #728dd082ac914dc2 — Environment-variable access.
repo/web/src/env.mjs:925 
      process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e89d379eed75ea2 — Environment-variable access.
repo/web/src/env.mjs:927 
      process.env.LANGFUSE_MIGRATION_V4_WRITE_MODE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3aff4577c7ef3067 — Environment-variable access.
repo/web/src/env.mjs:930 
      process.env.LANGFUSE_DISABLE_LEGACY_TRACING_IO_SEARCH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b98cacc044cc6972 — Environment-variable access.
repo/web/src/env.mjs:932 
      process.env.LANGFUSE_OBSERVATIONS_V2_SUBQUERY_REWRITE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28bbb1c7ee8c0ea0 — Environment-variable access.
repo/web/src/env.mjs:934 
      process.env.LANGFUSE_OBSERVATIONS_V2_SHADOW_QUERY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d700583a5ef3203 — Environment-variable access.
repo/web/src/env.mjs:936 
      process.env.LANGFUSE_OBSERVATIONS_V2_SHADOW_QUERY_SAMPLE_RATE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b20f1bb291bc9a6b — Environment-variable access.
repo/web/src/env.mjs:938 
      process.env.LANGFUSE_BLOCKED_USERIDS_CHATCOMPLETION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec581cf87304eb90 — Environment-variable access.
repo/web/src/env.mjs:942 
  skipValidation: process.env.DOCKER_BUILD === "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #cc62a8edfae54eda — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/auth-credentials/server/signupApiHandler.ts:116 
    await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
      method: "POST",
      body: JSON.stringify({
        name: body.name,
        email: body.email,
        referralSource: body.referralSource,
        cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
        userId: userId,
      }),
      headers: {
        "Content-Type": "application/json",
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #018c17a823b4f3f4 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/web/src/features/cloud-status-notification/server/cloud-status-router.ts:49 
        const response = await fetch(
          "https://status.langfuse.com/api/v1/summary",
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #584f7a7a655a1e83 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/datasets/hooks/useDatasetItemMediaUpload.ts:118 
          const response = await fetch(uploadUrl, {
            method: "PUT",
            body: file,
            headers,
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7512543023573118 — Environment-variable access.
repo/web/src/features/entitlements/server/getPlan.ts:12 
  if (process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9681dd48bc39820f — Environment-variable access.
repo/web/src/features/evals/server/evaluator-preflight.ts:62 
    process.env.LANGFUSE_SKIP_EVALUATOR_MODEL_CALL_VALIDATION === "true" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d7d8b88dc40c023a — Environment-variable access.
repo/web/src/features/evals/server/evaluator-preflight.ts:63 
    process.env.NODE_ENV === "test" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4d3e9763a795a71f — Environment-variable access.
repo/web/src/features/evals/server/evaluator-preflight.ts:64 
    process.env.DATABASE_URL?.includes("langfuse_test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cf62b6ccfc703d64 — Filesystem access.
repo/web/src/features/evals/utils/code-eval-template-starter-examples.clienttest.ts:22 
      module: readFileSync(
        require.resolve("@astral-sh/ruff-wasm-web/ruff_wasm_bg.wasm"),
      ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3294160264ab2c4c — Environment-variable access.
repo/web/src/features/events/lib/v4Rollout.clienttest.ts:6 
  const originalRegion = process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d90d74434c15155 — Environment-variable access.
repo/web/src/features/events/lib/v4Rollout.clienttest.ts:18 
    process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION = "US";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc2e9e3319ed2066 — Environment-variable access.
repo/web/src/features/events/lib/v4Rollout.clienttest.ts:22 
    process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION = originalRegion;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38f944c4aaa0edcb — Environment-variable access.
repo/web/src/features/events/lib/v4Rollout.ts:52 
  if (process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION === "DEV") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d0764f981667439 — Environment-variable access.
repo/web/src/features/experiments/components/table/ExperimentsTable.tsx:862 
                    const fullUrl = `${process.env.NEXT_PUBLIC_BASE_PATH ?? ""}${experimentUrl}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e05f30a8d271e2bf — Environment-variable access.
repo/web/src/features/mcp/server/security.ts:57 
      process.env.PORT ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #fa9d800624fd9412 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/playground/page/context/index.tsx:779 
  const result = await fetch(
    `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/chatCompletion`,
    {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body,
    },
  );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #31da92d75b7ea3ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/playground/page/context/index.tsx:824 
  const result = await fetch(
    `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/chatCompletion`,
    {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body,
    },
  );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c86b04dc657d0a41 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/playground/page/context/index.tsx:872 
  const result = await fetch(
    `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/chatCompletion`,
    {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body,
    },
  );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #82a2f779d86f1150 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/playground/page/context/index.tsx:932 
  const result = await fetch(
    `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/chatCompletion`,
    {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body,
    },
  );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #9ec435552048bdec — Environment-variable access.
repo/web/src/features/posthog-analytics/ServerPosthog.ts:22 
      if (process.env.NODE_ENV === "development") this.posthog.debug();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #27a1d716eaea26ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/slack/server/slack-webhook.ts:7 
  return await fetch(env.LANGFUSE_TEAM_SLACK_WEBHOOK, {
    method: "POST",
    body: JSON.stringify({ rawBody: JSON.stringify(message, null, 2) }),
    headers: {
      "Content-Type": "application/json",
    },
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a7e48cd29584a23e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/web/src/features/support-chat/pylon/pylonClient.ts:65 
  const res = await fetch(`${PYLON_API_BASE}/issues`, {
    method: "POST",
    headers: {
      Authorization: `Bearer ${apiKey}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify(body),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #4ed9179b3063760d — Hardcoded external endpoint. Review what data is sent to this destination.
repo/web/src/features/support-chat/pylon/pylonClient.ts:117 
  const res = await fetch(`${PYLON_API_BASE}/attachments`, {
    method: "POST",
    headers: {
      Authorization: `Bearer ${apiKey}`,
    },
    body: formData,
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ded927598d2a9db7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/features/support-chat/pylon/pylonClient.ts:153 
  const res = await fetch(`${PYLON_API_BASE}/accounts/${accountId}`, {
    method: "PATCH",
    headers: {
      Authorization: `Bearer ${apiKey}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ custom_fields: customFields }),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #2ca2b3126c8c1f79 — Environment-variable access.
repo/web/src/features/telemetry/index.ts:23 
    if (process.env.NODE_ENV !== "production") return;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e63c445203327c7 — Environment-variable access.
repo/web/src/features/telemetry/index.ts:33 
    if (process.env.CI) return;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05eb5667ff8b0c29 — Environment-variable access.
repo/web/src/features/telemetry/index.ts:271 
          environment: process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #a6a22a2aa7afd2f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/hooks/useSSEDashboardQuery.ts:108 
        const resp = await fetch(
          `${basePath}/api/dashboard/execute-query-stream`,
          {
            method: "POST",
            headers: { "Content-Type": "application/json" },
            body: JSON.stringify(inputRef.current),
            signal,
          },
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #2ed954d273c3a940 — Environment-variable access.
repo/web/src/instrumentation.ts:6 
    process.env.NEXT_PUBLIC_LANGFUSE_RUN_NEXT_INIT !== undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5589e3a10b5751c — Environment-variable access.
repo/web/src/instrumentation.ts:7 
      ? process.env.NEXT_PUBLIC_LANGFUSE_RUN_NEXT_INIT === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ba713d1408b113b — Environment-variable access.
repo/web/src/instrumentation.ts:10 
  if (process.env.NEXT_RUNTIME === "nodejs" && isInitLoadingEnabled) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #266f6da299842e82 — Environment-variable access.
repo/web/src/pages/_app.tsx:92 
  process.env.NEXT_PUBLIC_POSTHOG_KEY &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7059c704fe7a172e — Environment-variable access.
repo/web/src/pages/_app.tsx:93 
  process.env.NEXT_PUBLIC_POSTHOG_HOST

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46e280d593f8ed42 — Environment-variable access.
repo/web/src/pages/_app.tsx:95 
  posthog.init(process.env.NEXT_PUBLIC_POSTHOG_KEY, {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b372a22a0567c72e — Environment-variable access.
repo/web/src/pages/_app.tsx:96 
    api_host: process.env.NEXT_PUBLIC_POSTHOG_HOST || "https://eu.posthog.com",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #999f34bc80851df9 — Environment-variable access.
repo/web/src/pages/_app.tsx:100 
      if (process.env.NODE_ENV === "development") posthog.debug();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef30ae74ee12d92e — Environment-variable access.
repo/web/src/pages/_app.tsx:209 
          environment: process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da2e75476d3fbfbe — Environment-variable access.
repo/web/src/pages/_app.tsx:261 
  process.env.NEXT_RUNTIME === "nodejs" &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75eca159cf6fc554 — Environment-variable access.
repo/web/src/pages/_app.tsx:262 
  process.env.NEXT_MANUAL_SIG_HANDLE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #557660ab60885cc2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/api/auth/signup-verify.ts:96 
      await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
        method: "POST",
        body: JSON.stringify({
          name,
          email: normalizedEmail,
          cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
          userId: newUser.id,
        }),
        headers: {
          "Content-Type": "application/json",
        },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b9818dd9d9b9aba4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/auth/enterprise-sso-required.tsx:92 
      const response = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c6b92ca278e9f287 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/auth/sign-in.tsx:677 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ae9afc9f5f4b2883 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/auth/sign-up.tsx:149 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/check-sso`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ domain }),
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8b3a3b3c510ea824 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/auth/sign-up.tsx:196 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/signup`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify(values),
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #65432dd82ee453a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/pages/auth/sign-up.tsx:350 
      const res = await fetch(
        `${env.NEXT_PUBLIC_BASE_PATH ?? ""}/api/auth/signup-verify`,
        {
          method: "POST",
          headers: { "Content-Type": "application/json" },
          body: JSON.stringify({ email: values.email, name: values.name }),
        },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #17a91f2b8983b963 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/server/adminAccessWebhook.ts:57 
    const response = await fetch(env.LANGFUSE_ADMIN_ACCESS_WEBHOOK, {
      method: "POST",
      body: JSON.stringify(payload),
      headers: {
        "Content-Type": "application/json",
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #94ab3bd691fbdbc9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/server/api/routers/public.ts:33 
      const response = await fetch(
        `https://langfuse.com/api/latest-releases?repo=langfuse/langfuse&version=${VERSION}`,
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #54021a6e1ecc9a8a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/web/src/server/auth.ts:1119 
          await fetch(env.LANGFUSE_NEW_USER_SIGNUP_WEBHOOK, {
            method: "POST",
            body: JSON.stringify({
              name: user.name,
              email: user.email,
              cloudRegion: env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION,
              userId: user.id,
              // referralSource: ...
            }),
            headers: {
              "Content-Type": "application/json",
            },
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #acfdcceb697549d5 — Environment-variable access.
repo/web/src/server/utils/cookies.ts:13 
  env.NEXTAUTH_URL.startsWith("https://") || process.env.VERCEL === "1";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19ce5e957a89ac6f — Environment-variable access.
repo/web/src/utils/api.ts:37 
      : process.env.VERCEL_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62ff191996554308 — Environment-variable access.
repo/web/src/utils/api.ts:38 
        ? `https://${process.env.VERCEL_URL}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #631f7c5402ad1af9 — Environment-variable access.
repo/web/src/utils/api.ts:39 
        : `http://localhost:${process.env.PORT ?? 3000}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bff3eff0abbdb08 — Environment-variable access.
repo/web/src/utils/api.ts:169 
        !!process.env.NEXT_PUBLIC_BUILD_ID &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d82dbd4f1d78e24c — Environment-variable access.
repo/web/src/utils/api.ts:170 
        buildId !== process.env.NEXT_PUBLIC_BUILD_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a412b6fd9e2534a — Environment-variable access.
repo/web/src/utils/api.ts:316 
          enabled: () => process.env.NODE_ENV === "development",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7394fa9e3a8a55d — Environment-variable access.
repo/web/src/utils/api.ts:401 
      enabled: () => process.env.NODE_ENV === "development",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #884a25e08b440468 — Environment-variable access.
repo/web/src/utils/shutdown.ts:29 
  Boolean(process.env.NEXT_MANUAL_SIG_HANDLE) && globalThis.sigtermReceived;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): worker

npm first-party
medium telemetry production #18833db05552d6b6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:36 
  const hadEvents = mixpanel.getBatchSize() > 0;

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #4b71d77c5539087f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:37 
  await mixpanel.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #3d4f0c3139ca653f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:76 
    mixpanel.addEvent(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #b402a546ab2721ad — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:111 
    mixpanel.addEvent(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #f0f5976e7ce7af16 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:146 
    mixpanel.addEvent(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #5b8d668979385cc8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:180 
    mixpanel.addEvent(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #8d46decda480a961 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/mixpanel/handleMixpanelIntegrationProjectJob.ts:299 
      bytes: mixpanel.getSerializedBytes(),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #eb899dd84a94ebe1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:21 
import { PostHog } from "posthog-node";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e16c1944529792d3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:94 
  posthog.on("error", (error) => {
    logger.error(
      `[POSTHOG] Error sending traces to PostHog for project ${config.projectId}: ${error}`,
    );
    sendError = error instanceof Error ? error : new Error(String(error));
  });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #61d8dffa36158ee5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:106 
    posthog.capture(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #f2ad27b7cebd7fdd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:108 
      await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d80e93336644b90b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:115 
  await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #b468501a569668a7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:143 
  posthog.on("error", (error) => {
    logger.error(
      `[POSTHOG] Error sending generations to PostHog for project ${config.projectId}: ${error}`,
    );
    sendError = error instanceof Error ? error : new Error(String(error));
  });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #830c437debd1218e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:155 
    posthog.capture(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d99e4c4d6fba3184 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:157 
      await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a52e3f60885f9365 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:164 
  await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #4404be6abe2a2969 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:192 
  posthog.on("error", (error) => {
    logger.error(
      `[POSTHOG] Error sending scores to PostHog for project ${config.projectId}: ${error}`,
    );
    sendError = error instanceof Error ? error : new Error(String(error));
  });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a599281408571634 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:204 
    posthog.capture(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #839ce1b35ad5ed25 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:206 
      await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #4593befcb7c31fec — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:213 
  await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #ab46b02b3b2cb8b9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:240 
  posthog.on("error", (error) => {
    logger.error(
      `[POSTHOG] Error sending events to PostHog for project ${config.projectId}: ${error}`,
    );
    sendError = error instanceof Error ? error : new Error(String(error));
  });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #99002112088f318b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:252 
    posthog.capture(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #27a1d186f552823f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:254 
      await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #6610301bda0274a1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/worker/src/features/posthog/handlePostHogIntegrationProjectJob.ts:260 
  await posthog.flush();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 154 low-confidence finding(s)
low env_fs test-only Excluded from app score #4901b7fa658159b6 — Environment-variable access.
repo/worker/src/__tests__/batchAction.test.ts:41 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ec5ca39f402ab3bc — Environment-variable access.
repo/worker/src/__tests__/batchExport.test.ts:30 
process.env.LANGFUSE_DATASET_SERVICE_READ_FROM_VERSIONED_IMPLEMENTATION =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #232b56294cb6a7d7 — Environment-variable access.
repo/worker/src/__tests__/batchExport.test.ts:32 
process.env.LANGFUSE_DATASET_SERVICE_WRITE_TO_VERSIONED_IMPLEMENTATION = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8be4447ea03b82dc — Environment-variable access.
repo/worker/src/__tests__/batchExport.test.ts:35 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6c5b7b87fe359a39 — Environment-variable access.
repo/worker/src/__tests__/blobStorageIntegrationProcessing.test.ts:13 
  const cloudRegion = process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3a9e02b6afb2e342 — Environment-variable access.
repo/worker/src/__tests__/blobStorageIntegrationProcessing.test.ts:14 
  delete process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6705f8541f2e68e5 — Environment-variable access.
repo/worker/src/__tests__/blobStorageIntegrationProcessing.test.ts:77 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2b7dbedf823bb2a3 — Environment-variable access.
repo/worker/src/__tests__/blobStorageIntegrationProcessing.test.ts:116 
      process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION = originalCloudRegion;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #10c9e84bea371573 — Environment-variable access.
repo/worker/src/__tests__/blobStorageIntegrationProcessing.test.ts:118 
      delete process.env.NEXT_PUBLIC_LANGFUSE_CLOUD_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c39a68e9368bbf4f — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:22 
  delete process.env.REDIS_CLUSTER_NODES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #29cfe7052cb27fa9 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:23 
  delete process.env.REDIS_SENTINEL_NODES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7305c4b8bf563641 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:24 
  delete process.env.REDIS_SENTINEL_MASTER_NAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6bcf4e70b550cd7a — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:25 
  delete process.env.REDIS_SENTINEL_USERNAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1bafee9feae4b206 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:26 
  delete process.env.REDIS_SENTINEL_PASSWORD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #094ea43e8289da62 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:38 
    process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #126a64a75a503c8b — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:100 
    delete process.env.LANGFUSE_BULLMQ_SKIP_REDIS_VERSION_CHECK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a5522ba9eb19b811 — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:115 
    process.env.LANGFUSE_BULLMQ_SKIP_REDIS_VERSION_CHECK = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3f4c3081d6659c2e — Environment-variable access.
repo/worker/src/__tests__/bullmqVersionCheckOptions.test.ts:139 
    process.env.LANGFUSE_BULLMQ_SKIP_REDIS_VERSION_CHECK = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #0f73aae41e55d33f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/worker/src/__tests__/chatml/framework-traces/download_traces.js:119 
  const res = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #5037e44604669948 — Filesystem access.
repo/worker/src/__tests__/chatml/framework-traces/download_traces.js:225 
    fs.writeFileSync(path.join(__dirname, fileName), content, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #333fb2c6abfe1448 — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:2 
import { readFileSync, existsSync, writeFileSync, readdirSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d5bd498e1735d026 — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:535 
      const traceContent = readFileSync(traceFilePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b33ab95c0c902539 — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:544 
        writeFileSync(expectedFilePath, JSON.stringify({}, null, 2), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b96cd969e379e6bb — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:549 
      const expectedContent = readFileSync(expectedFilePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c512a95cc19c22f9 — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:636 
    const expectedContent = readFileSync(expectedFilePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b40179bc773ab5f3 — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:640 
    writeFileSync(expectedFilePath, JSON.stringify({}, null, 2), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #29872b5953cedbaa — Filesystem access.
repo/worker/src/__tests__/chatml/integration.test.ts:646 
  writeFileSync(expectedFilePath, JSON.stringify(expected, null, 2), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a1a911fee0c89207 — Environment-variable access.
repo/worker/src/__tests__/encryption.test.ts:8 
const originalEnv = process.env.ENCRYPTION_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9088c4214a84811f — Environment-variable access.
repo/worker/src/__tests__/encryption.test.ts:12 
  process.env.ENCRYPTION_KEY =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3e25fb9f99de4207 — Environment-variable access.
repo/worker/src/__tests__/encryption.test.ts:18 
  process.env.ENCRYPTION_KEY = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8ae002bf4f0c23f0 — Environment-variable access.
repo/worker/src/__tests__/evalService.filtering.test.ts:21 
let OPENAI_API_KEY = process.env.OPENAI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5b459a69fc31eae8 — Environment-variable access.
repo/worker/src/__tests__/evalService.filtering.test.ts:25 
  OPENAI_API_KEY || process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a90ea20352690fee — Environment-variable access.
repo/worker/src/__tests__/evalService.test.ts:49 
let OPENAI_API_KEY = process.env.OPENAI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8aea2c1a1bee8fa0 — Environment-variable access.
repo/worker/src/__tests__/evalService.test.ts:53 
  OPENAI_API_KEY || process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #54e09a51487a2bb9 — Environment-variable access.
repo/worker/src/__tests__/event-stream-score-filters.test.ts:19 
  process.env.LANGFUSE_MIGRATION_V4_ALLOW_PREVIEW_OPT_IN === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #9e5bedcb14bb5ea1 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/ingestionMasking.test.ts:86 
      http.post("https://masking.example.com/success", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: await request.json(),
        });
        return HttpResponse.json(maskedSpanData, { status: 200 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #9362184962596baa — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/ingestionMasking.test.ts:97 
      http.post("https://masking.example.com/echo", async ({ request }) => {
        const body = await request.json();
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body,
        });
        return HttpResponse.json(body, { status: 200 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #582a895269a46a4f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/ingestionMasking.test.ts:109 
      http.post("https://masking.example.com/error", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: await request.json(),
        });
        return HttpResponse.json(
          { error: "Internal Server Error" },
          { status: 500 },
        );
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #3b95f34a094c28d1 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/ingestionMasking.test.ts:123 
      http.post("https://masking.example.com/timeout", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: await request.json(),
        });
        // Delay longer than the timeout
        await delay(5000);
        return HttpResponse.json(maskedSpanData, { status: 200 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #2a628a59caa4f89d — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:282 
      if (!process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4cbef47d21d7e31e — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:310 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8fc9477fb36f3614 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:336 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ada20b432b19c436 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:362 
        secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #07a852b1f582c428 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:387 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_OPENAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b1fa7fc8ae37b9c2 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:401 
      if (!process.env.LANGFUSE_LLM_CONNECTION_ANTHROPIC_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6ddc68a4f9e73b3d — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:430 
            process.env.LANGFUSE_LLM_CONNECTION_ANTHROPIC_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b959c8332d09540f — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:458 
            process.env.LANGFUSE_LLM_CONNECTION_ANTHROPIC_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #127cdf73f0e01a8c — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:485 
        secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_ANTHROPIC_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8468244003a44eb3 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:511 
            process.env.LANGFUSE_LLM_CONNECTION_ANTHROPIC_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #15fe3f9a7c8cb389 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:524 
      if (!process.env.LANGFUSE_LLM_CONNECTION_AZURE_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2e7f40ef1fabe040 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:531 
      if (!process.env.LANGFUSE_LLM_CONNECTION_AZURE_BASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ee7859d7577a50e4 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:538 
      if (!process.env.LANGFUSE_LLM_CONNECTION_AZURE_MODEL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8c12991701845454 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:561 
          model: process.env.LANGFUSE_LLM_CONNECTION_AZURE_MODEL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3b668b8364340f9c — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:566 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_AZURE_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #86fd641034d80139 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:567 
          baseURL: process.env.LANGFUSE_LLM_CONNECTION_AZURE_BASE_URL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #317014956857acfb — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:588 
          model: process.env.LANGFUSE_LLM_CONNECTION_AZURE_MODEL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5e99afef1aa9a665 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:593 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_AZURE_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c20640505c97fd4a — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:594 
          baseURL: process.env.LANGFUSE_LLM_CONNECTION_AZURE_BASE_URL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7b4d8850e793b1ab — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:615 
        model: process.env.LANGFUSE_LLM_CONNECTION_AZURE_MODEL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2013f6712f0f364a — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:620 
        secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_AZURE_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b3462ad964dc3f48 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:621 
        baseURL: process.env.LANGFUSE_LLM_CONNECTION_AZURE_BASE_URL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #845cbdfaa9c27332 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:640 
          model: process.env.LANGFUSE_LLM_CONNECTION_AZURE_MODEL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6397e3e144ce9f7b — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:646 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_AZURE_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b608119b5bf4c753 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:647 
          baseURL: process.env.LANGFUSE_LLM_CONNECTION_AZURE_BASE_URL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #77f813d4b80cc77f — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:661 
      if (!process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_ACCESS_KEY_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a28a1542c907790a — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:668 
      if (!process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_SECRET_ACCESS_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a3ebf923d8e18a65 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:675 
      if (!process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_REGION) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2e09ba223a7255fe — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:687 
        accessKeyId: process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_ACCESS_KEY_ID!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0e71b9e24549d777 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:689 
          process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_SECRET_ACCESS_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9d287e539cf7406b — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:695 
        region: process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_REGION!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #25256598e766f5c3 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:814 
      if (!process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_API_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7b8c72b871a76b33 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:821 
      if (!process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_REGION) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b27d3fd78cd0b78b — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:833 
        apiKey: process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_API_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4859f72fb7309c5c — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:838 
      region: process.env.LANGFUSE_LLM_CONNECTION_BEDROCK_REGION!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #49931389c351e868 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:909 
      if (!process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #362dd8e0afff0e4c — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:937 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8d1b0421447d7f17 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:968 
              process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e8a72f89e023bdb9 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1014 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #201499207dc59e67 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1041 
        secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5d86176351039625 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1067 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b4856ada52a8aed3 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1098 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #dea2b7976e488ad5 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1132 
          secretKey: encrypt(process.env.LANGFUSE_LLM_CONNECTION_VERTEXAI_KEY!),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #10f55d3ad10c7531 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1145 
      if (!process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ed453bb3c6f799c1 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1175 
              process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #fc641d82940ce2c1 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1205 
              process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #dd297c10512dadb0 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1234 
          process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #10cd0bf3641ad8a6 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1263 
              process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #525698f3a69af527 — Environment-variable access.
repo/worker/src/__tests__/llmConnections.test.ts:1298 
              process.env.LANGFUSE_LLM_CONNECTION_GOOGLEAISTUDIO_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #09b1ab07cae79502 — Environment-variable access.
repo/worker/src/__tests__/modelMatch.test.ts:24 
  process.env.LANGFUSE_LOCAL_CACHE_MODEL_MATCH_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #730ba958d9c7f7db — Environment-variable access.
repo/worker/src/__tests__/modelMatch.test.ts:28 
    process.env.LANGFUSE_LOCAL_CACHE_MODEL_MATCH_ENABLED = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a042f25728fee9fc — Environment-variable access.
repo/worker/src/__tests__/modelMatch.test.ts:47 
      delete process.env.LANGFUSE_LOCAL_CACHE_MODEL_MATCH_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #db6648ce425b22c0 — Environment-variable access.
repo/worker/src/__tests__/modelMatch.test.ts:49 
      process.env.LANGFUSE_LOCAL_CACHE_MODEL_MATCH_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #cb26a664c66dd453 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/monitorWorkerIntegration.test.ts:287 
      http.post("https://webhook.example.com/*", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          body: JSON.stringify(await request.json()),
        });
        return HttpResponse.json({ success: true }, { status: 200 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #37fad59ca38f4e8a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/network.ts:37 
  return http.post("https://api.openai.com/v1/chat/completions", async () => {
    logger.info("openai handler");
    return response;
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #bb14d0494a30f7eb — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:6 
  process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5b1042ddf924099c — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:326 
        process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #754f9ab750b5363d — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:327 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6595e64aaa10ff5d — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:354 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5d2ee495f9557b3e — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:362 
        process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5a211af1051a7c94 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:363 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8b6ca08bd747d271 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:388 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #01246c53837e7511 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:396 
        process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1de6ca54f24e79e1 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:397 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f187689c72cced28 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:420 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a6adb29a0280995b — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:428 
        process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f9816db381403306 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:429 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cbab5663cbac4330 — Environment-variable access.
repo/worker/src/__tests__/thresholdProcessing.test.ts:462 
      process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d6f79db8e3430a5e — Environment-variable access.
repo/worker/src/__tests__/usageThresholdCacheInvalidation.test.ts:15 
  process.env.LANGFUSE_FREE_TIER_USAGE_THRESHOLD_ENFORCEMENT_ENABLED = "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9511d542ca3a0372 — Environment-variable access.
repo/worker/src/__tests__/usageThresholdCacheInvalidation.test.ts:19 
const SALT = process.env.SALT || "test-salt-for-hashing";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #b1a6accc45aaa954 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:206 
        http.post("https://redirector.example.com/step1", () => {
          step1Called = true;
          return new Response(null, {
            status: 302,
            headers: { Location: "https://final.example.com/webhook" },
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #8a800752104bef94 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:213 
        http.post("https://final.example.com/webhook", () => {
          step2Called = true;
          return HttpResponse.json({ success: true }, { status: 200 });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #43afa6af31061ba8 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:244 
        http.post("https://redirector.example.com/step1", () => {
          callOrder.push("step1");
          return new Response(null, {
            status: 302,
            headers: { Location: "https://redirector.example.com/step2" },
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #2c8844644890af0d — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:251 
        http.post("https://redirector.example.com/step2", () => {
          callOrder.push("step2");
          return new Response(null, {
            status: 302,
            headers: { Location: "https://redirector.example.com/step3" },
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #fcfdc33ab09bbe88 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:258 
        http.post("https://redirector.example.com/step3", () => {
          callOrder.push("step3");
          return HttpResponse.json({ success: true }, { status: 200 });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #9b66925b02aaf6af — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:288 
        http.post("https://direct.example.com/webhook", () => {
          called = true;
          return HttpResponse.json({ success: true }, { status: 200 });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #d0af5947e11c313e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:318 
        http.post("https://relative-redirect.example.com/start", () => {
          return new Response(null, {
            status: 302,
            headers: { Location: "/final" }, // Relative URL
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #71855b3c1513ce47 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:324 
        http.post("https://relative-redirect.example.com/final", () => {
          finalCalled = true;
          return HttpResponse.json({ success: true }, { status: 200 });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #a509ae21a048965e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:359 
          http.post(
            `https://infinite-redirect.example.com/step${currentStep}`,
            () => {
              return new Response(null, {
                status: 302,
                headers: {
                  Location: `https://infinite-redirect.example.com/step${nextStep}`,
                },
              });
            },
          ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #461b09253b4914ae — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:396 
        http.post("https://circular.example.com/a", () => {
          return new Response(null, {
            status: 302,
            headers: { Location: "https://circular.example.com/b" },
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #7e135a2b09138562 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:402 
        http.post("https://circular.example.com/b", () => {
          return new Response(null, {
            status: 302,
            headers: { Location: "https://circular.example.com/a" },
          });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #aae8bc6a8f68c05f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhook-redirect.test.ts:431 
        http.post("https://broken-redirect.example.com/hook", () => {
          // Return 302 without Location header
          return new Response(null, { status: 302 });
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #000c8138123680a2 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhooks.test.ts:48 
      http.post("https://webhook.example.com/*", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: JSON.stringify(await request.json()),
        });
        return HttpResponse.json({ success: true }, { status: 200 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #f868830b6e1a5f3a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhooks.test.ts:59 
      http.post("https://webhook-error.example.com/*", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: JSON.stringify(await request.json()),
        });
        return HttpResponse.json(
          { error: "Internal Server Error" },
          { status: 500 },
        );
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #f5fd3b43c647cf33 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhooks.test.ts:73 
      http.post("https://webhook-201.example.com/*", async ({ request }) => {
        this.receivedRequests.push({
          url: request.url,
          method: request.method,
          headers: Object.fromEntries(request.headers.entries()),
          body: JSON.stringify(await request.json()),
        });
        return HttpResponse.json({ success: true }, { status: 201 });
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #c0cf53af79253501 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/worker/src/__tests__/webhooks.test.ts:84 
      http.post("https://webhook-timeout.example.com/*", () => {
        return HttpResponse.error();
      }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #3dbbe8bcd5c72904 — Environment-variable access.
repo/worker/src/env.ts:617 
  process.env.DOCKER_BUILD === "1" // eslint-disable-line turbo/no-undeclared-env-vars

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3963997dd4206956 — Environment-variable access.
repo/worker/src/features/evaluation/codeBased/awsLambdaCodeEvalDispatcher.integration.test.ts:9 
const endpoint = process.env.LANGFUSE_CODE_EVAL_AWS_LAMBDA_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0b0c15c2cdcc59d5 — Environment-variable access.
repo/worker/src/features/evaluation/codeBased/awsLambdaCodeEvalDispatcher.integration.test.ts:13 
process.env.AWS_ACCESS_KEY_ID ??= "test";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #382de293c02afd6e — Environment-variable access.
repo/worker/src/features/evaluation/codeBased/awsLambdaCodeEvalDispatcher.integration.test.ts:14 
process.env.AWS_SECRET_ACCESS_KEY ??= "test";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2ea5d00445dcb95b — Environment-variable access.
repo/worker/src/features/evaluation/codeBased/awsLambdaCodeEvalDispatcher.integration.test.ts:15 
process.env.AWS_REGION ??= "us-east-1";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ae52343a607609db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/worker/src/features/mixpanel/mixpanelClient.ts:77 
      const response = await fetch(url, {
        method: "POST",
        headers: {
          "Content-Type": "application/json",
          "Content-Encoding": "gzip",
          Authorization: authHeader,
        },
        body: compressedBody as unknown as BodyInit,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #a7fd2be3d2bc860f — Filesystem access.
repo/worker/src/scripts/convertDefaultModelPricesToTiers.ts:32 
import * as fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c1f2ccb599959d6c — Filesystem access.
repo/worker/src/scripts/convertDefaultModelPricesToTiers.ts:133 
  const oldData = JSON.parse(fs.readFileSync(inputPath, "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #271657c8a61d5006 — Filesystem access.
repo/worker/src/scripts/convertDefaultModelPricesToTiers.ts:149 
  fs.writeFileSync(outputPath, JSON.stringify(newModels, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7d5ce273775f7bfe — Filesystem access.
repo/worker/src/scripts/createDefaultModelPricesJson.ts:68 
    await fs.writeFile(EXPORT_PATH, JSON.stringify(modelPrices, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0845bb759bf34d79 — Filesystem access.
repo/worker/src/scripts/refillQueueEvent/index.ts:3 
import * as fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d3ea4cc9d16f0353 — Filesystem access.
repo/worker/src/scripts/refillQueueEvent/index.ts:67 
  const fileContent = fs.readFileSync(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6537d20e46385fa7 — Filesystem access.
repo/worker/src/scripts/replayIngestionEvents/s3-ingestion-event-replay.ts:13 
import * as fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f1ad7df91db33a8f — Environment-variable access.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:56 
const LANGFUSE_HOST = process.env.LANGFUSE_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0c774ff5c984e764 — Environment-variable access.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:57 
const ADMIN_API_KEY = process.env.ADMIN_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e728a634417be784 — Filesystem access.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:79 
  const content = readFileSync(CHECKPOINT_FILE, "utf-8").trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b98cc69d0ddf85e3 — Filesystem access.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:85 
  writeFileSync(CHECKPOINT_FILE, String(offset), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #93ba4e9c69f8d842 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:263 
    const resp = await fetch(API_URL, {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Authorization: `Bearer ${ADMIN_API_KEY}`,
      },
      body: JSON.stringify({ keys }),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low pii_flow test-only Excluded from app score #f95479e3cda55452 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration. Non-production path — not application runtime.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:265 · flow /tmp/closeopen-fiqmn297/repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:57 → /tmp/closeopen-fiqmn297/repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:265 
      headers: {
        "Content-Type": "application/json",
        Authorization: `Bearer ${ADMIN_API_KEY}`,
      },

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
low pii_flow test-only Excluded from app score #aa044ad7cc8caec6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:282 · flow /tmp/closeopen-fiqmn297/repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:57 → /tmp/closeopen-fiqmn297/repo/worker/src/scripts/replayIngestionEventsV2/replay.ts:282 
        console.warn(
          `  Retry ${attempt + 1}/${maxRetries} after ${resp.status} (waiting ${Math.round(delay)}ms)`,
        );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs test-only Excluded from app score #832a7d5228cc8071 — Filesystem access.
repo/worker/src/scripts/verifyClickhouseRecords/index.ts:254 
    await writeFile(outPath, failedObservationList.join("\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7b8523d090d2bba3 — Filesystem access.
repo/worker/src/scripts/verifyClickhouseRecords/index.ts:269 
    await writeFile(outPath, failedTraceList.join("\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f2d1fcc5adaf4746 — Filesystem access.
repo/worker/src/scripts/verifyClickhouseRecords/index.ts:282 
    await writeFile(outPath, failedScoreList.join("\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d92bf05a32b3e0d — Environment-variable access.
repo/worker/src/utils/hostId.ts:14 
    process.env.ECS_CONTAINER_METADATA_URI_V4 ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e08b4b159e105084 — Environment-variable access.
repo/worker/src/utils/hostId.ts:15 
    process.env.ECS_CONTAINER_METADATA_URI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dab998813b5b5f32 — Environment-variable access.
repo/worker/src/utils/hostId.ts:22 
  const envHost = process.env.HOSTNAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bcf63839e99e3ac8 — Environment-variable access.
repo/worker/vitest.config.ts:10 
    reporters: process.env.CI

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #87038517b057d1b3 — Environment-variable access.
repo/worker/vitest.config.ts:14 
    retry: process.env.CI ? 3 : 0,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #61e207f22f5a74bc — Environment-variable access.
repo/worker/vitest.config.ts:18 
    slowTestThreshold: process.env.CI ? 2_000 : 300,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm)

npm first-party
expand_more 19 low-confidence finding(s)
low env_fs test-only Excluded from app score #458e1ec87c6834c7 — Filesystem access.
repo/.agents/skills/add-model-price/scripts/test-match-pattern.mjs:67 
  const models = JSON.parse(await fs.readFile(defaultFile, "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #98c25fd697d268e2 — Filesystem access.
repo/.agents/skills/add-model-price/scripts/validate-pricing-file.mjs:33 
const raw = await fs.readFile(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #56a1e4b7fc3857b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/.agents/skills/pnpm-upgrade-package/scripts/check-release-age-window.mjs:71 
    const response = await fetch(
      `https://registry.npmjs.org/${encodeURIComponent(name)}`,
      {
        headers: {
          accept: "application/json",
          "user-agent": "langfuse-pnpm-upgrade-package-skill",
        },
        signal: abortController.signal,
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #a1744a9152b62b17 — Filesystem access.
repo/.agents/skills/pnpm-upgrade-package/scripts/lib/workspace-utils.mjs:23 
  return JSON.parse(readFileSync(path, "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bc01420d04f70489 — Filesystem access.
repo/.agents/skills/pnpm-upgrade-package/scripts/lib/workspace-utils.mjs:68 
  const raw = readFileSync(path, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d49f4afb6a352416 — Filesystem access.
repo/scripts/agents/sync-agent-shims.mjs:17 
const config = JSON.parse(readFileSync(sourcePath, "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1807e1ac5e53db98 — Filesystem access.
repo/scripts/agents/sync-agent-shims.mjs:244 
      const current = readFileSync(output.path, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #34c6e88b0bada7a8 — Filesystem access.
repo/scripts/agents/sync-agent-shims.mjs:270 
    writeFileSync(output.path, output.content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b1fb56f75014e80d — Environment-variable access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:30 
  Authorization: process.env.GITHUB_TOKEN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cd3ff93cf5a6e5bd — Environment-variable access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:31 
    ? `Bearer ${process.env.GITHUB_TOKEN}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #188c32fe30f848ce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/scripts/in-app-agent/sync-raw-skills.mjs:37 
  const response = await fetch(url, {
    headers: getGitHubHeaders(),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #0b8badabca0e232f — Environment-variable access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:44 
        !process.env.GITHUB_TOKEN &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #d239571220a41deb — Hardcoded external endpoint. Review what data is sent to this destination.
repo/scripts/in-app-agent/sync-raw-skills.mjs:97 
  const response = await fetch(sourceApiUrl, {
    headers: getGitHubHeaders(),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #ed8051cfdf7de205 — Environment-variable access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:104 
        !process.env.GITHUB_TOKEN &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d01184bddc813c17 — Filesystem access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:212 
        if (readFileSync(localPath, "utf8") !== content) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #66e1eca7e880bc63 — Filesystem access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:227 
        readFileSync(resolve(generatedDir, generatedModuleName), "utf8") !==

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f7b63e7fe6e39819 — Filesystem access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:263 
    writeFileSync(resolve(rawTargetDir, basename(name)), content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1b1519504f3afe6e — Filesystem access.
repo/scripts/in-app-agent/sync-raw-skills.mjs:266 
  writeFileSync(
    resolve(generatedDir, generatedModuleName),
    generatedModuleContent,
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6b0686040bb7a4e9 — Filesystem access.
repo/scripts/scan-client-bundle.mjs:242 
  const code = fs.readFileSync(file, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/in-app-agent-sandbox-runtime

npm first-party
expand_more 5 low-confidence finding(s)
low env_fs production #00557d118b20771c — Filesystem access.
repo/packages/in-app-agent-sandbox-runtime/src/server.ts:90 
    await writeFile(filePath, file.content, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65e3f10f23b19056 — Filesystem access.
repo/packages/in-app-agent-sandbox-runtime/src/server.ts:166 
    content = await readFile(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16d3ecbd857c15b5 — Filesystem access.
repo/packages/in-app-agent-sandbox-runtime/src/server.ts:187 
  await writeFile(filePath, body.content, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6fa84211176f9fde — Filesystem access.
repo/packages/in-app-agent-sandbox-runtime/src/server.ts:206 
    current = await readFile(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4fbe3f5aefb453e — Filesystem access.
repo/packages/in-app-agent-sandbox-runtime/src/server.ts:223 
    await writeFile(
      filePath,
      current.replace(body.oldText, body.newText),
      "utf8",
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/shared

npm first-party
expand_more 44 low-confidence finding(s)
low env_fs test-only Excluded from app score #fe1a7ef8657ca953 — Environment-variable access.
repo/packages/shared/scripts/seeder/cli-main.ts:62 
const baseUrl = (process.env.NEXTAUTH_URL ?? "http://localhost:3000").replace(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3ec4c769e0103f69 — Environment-variable access.
repo/packages/shared/scripts/seeder/cli.ts:26 
  (name) => process.env[name] === undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cd640723d73ee185 — Environment-variable access.
repo/packages/shared/scripts/seeder/cli.ts:43 
    process.env.LANGFUSE_LOG_LEVEL = "error";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #aae122c566b235cb — Environment-variable access.
repo/packages/shared/scripts/seeder/doctor.ts:52 
  ].filter((name) => process.env[name] === undefined);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #fd2e35fc382dbf73 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/packages/shared/scripts/seeder/doctor.ts:297 
    const response = await fetch(url, { signal: AbortSignal.timeout(3000) });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #d5c2e8605b8988a9 — Environment-variable access.
repo/packages/shared/scripts/seeder/doctor.ts:315 
  const endpoint = process.env.LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1b5882df97552995 — Filesystem access.
repo/packages/shared/scripts/seeder/scenarios/many-traces.ts:1 
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4e3b45fb394a69d3 — Filesystem access.
repo/packages/shared/scripts/seeder/scenarios/many-traces.ts:25 
    readFileSync(path.join(utilsDir, "nested_json.json"), "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #286bde85bb5c99ce — Filesystem access.
repo/packages/shared/scripts/seeder/scenarios/many-traces.ts:28 
    readFileSync(path.join(utilsDir, "chat_ml_json.json"), "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5cd1f1791cb415d9 — Filesystem access.
repo/packages/shared/scripts/seeder/scenarios/many-traces.ts:31 
    heavyMarkdown: readFileSync(path.join(utilsDir, "markdown.txt"), "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9442029dbd3e14d0 — Filesystem access.
repo/packages/shared/scripts/seeder/seed-media.ts:11 
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f4bbb6e675e43038 — Filesystem access.
repo/packages/shared/scripts/seeder/seed-media.ts:89 
  const fileBytes = fs.readFileSync(mediaFile.filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c884bd0d031df387 — Filesystem access.
repo/packages/shared/scripts/seeder/seed-media.ts:161 
  const fileBytes = fs.readFileSync(mediaFile.filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f0544c9676def475 — Filesystem access.
repo/packages/shared/scripts/seeder/seed-postgres.ts:59 
  inAppAgentSystemPrompt = readFileSync(
    IN_APP_AGENT_SYSTEM_PROMPT_PATH,
    "utf-8",
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #454b1009e072a469 — Environment-variable access.
repo/packages/shared/scripts/seeder/seed-postgres.ts:219 
    secret: process.env.SEED_SECRET_KEY ?? "sk-lf-1234567890", // eslint-disable-line turbo/no-undeclared-env-vars

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2b0813a9f7166992 — Environment-variable access.
repo/packages/shared/scripts/seeder/seed-postgres.ts:283 
      secret: process.env.SEED_SECRET_KEY ?? "sk-lf-asdfghjkl", // eslint-disable-line turbo/no-undeclared-env-vars

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e770a3ea2c600453 — Environment-variable access.
repo/packages/shared/scripts/seeder/seed-postgres.ts:316 
    const OPENAI_API_KEY = process.env.OPENAI_API_KEY; // eslint-disable-line turbo/no-undeclared-env-vars

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d10914d28f73f95e — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/framework-trace-loader.ts:1 
import { readFileSync, readdirSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ff3a9209a14e6de5 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/framework-trace-loader.ts:45 
      const content = readFileSync(filePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #dea48ad623b25cd9 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/merge-observations.ts:1 
import { readFileSync, writeFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #06b1d982d04b63f9 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/merge-observations.ts:23 
const baseData = JSON.parse(readFileSync(baseFile, "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #eba8294782a69a00 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/merge-observations.ts:24 
const detailedObs = JSON.parse(readFileSync(detailedFile, "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e1bb05b239776f1a — Filesystem access.
repo/packages/shared/scripts/seeder/utils/framework-traces/merge-observations.ts:64 
writeFileSync(outputFile, JSON.stringify(output, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #13f95f50b3fd05bd — Filesystem access.
repo/packages/shared/scripts/seeder/utils/seeder-orchestrator.ts:25 
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #20f0a1750c91f6ed — Filesystem access.
repo/packages/shared/scripts/seeder/utils/seeder-orchestrator.ts:61 
        readFileSync(nestedJsonPath, "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3430033bfc4a3930 — Filesystem access.
repo/packages/shared/scripts/seeder/utils/seeder-orchestrator.ts:63 
      const heavyMarkdownContent = readFileSync(heavyMarkdownPath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1736eeba2a98914d — Filesystem access.
repo/packages/shared/scripts/seeder/utils/seeder-orchestrator.ts:65 
        readFileSync(chatMlJsonPath, "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2addf01c9c34c464 — Environment-variable access.
repo/packages/shared/src/db.ts:34 
  if (env.NODE_ENV === "development") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4de36547b9638638 — Environment-variable access.
repo/packages/shared/src/db.ts:55 
if (process.env.NODE_ENV === "development") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c508626a678815a — Environment-variable access.
repo/packages/shared/src/env.ts:540 
  process.env.DOCKER_BUILD === "1" // eslint-disable-line turbo/no-undeclared-env-vars

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f7af1c305afad3d — Environment-variable access.
repo/packages/shared/src/features/analytics-integrations/export-source-policy.ts:49 
const _override = process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORT_CUTOFF

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d79c168c4caf5530 — Environment-variable access.
repo/packages/shared/src/features/analytics-integrations/export-source-policy.ts:50 
  ? new Date(process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORT_CUTOFF)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f225d97bf25a3b96 — Environment-variable access.
repo/packages/shared/src/features/analytics-integrations/export-source-policy.ts:57 
const _exporterOverride = process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORTER_CUTOFF

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbd3bbfede699c51 — Environment-variable access.
repo/packages/shared/src/features/analytics-integrations/export-source-policy.ts:58 
  ? new Date(process.env.NEXT_PUBLIC_LANGFUSE_BLOB_EXPORTER_CUTOFF)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #30d3792618ae2d0f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/packages/shared/src/server/auth/gitHubEnterpriseProvider.ts:33 
          const res = await fetch(`${apiBaseUrl}/user/emails`, {
            headers: { Authorization: `token ${tokens.access_token}` },
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e4015e152027db50 — Environment-variable access.
repo/packages/shared/src/server/clickhouse/client.ts:120 
      (key) => process.env[key] === "true",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #af05f79370b21b20 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/packages/shared/src/server/ee/ingestionMasking/applyIngestionMasking.ts:84 
    const response = await fetch(config.callbackUrl, {
      method: "POST",
      headers,
      body: JSON.stringify(data),
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #aa2796ca4dcce21b — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/shared/src/server/llm/llmText.test.ts:223 
                data: new URL(
                  "http://dns-rebind.attacker.example/metadata?token=secret",
                ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #5b74a929ec277644 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/shared/src/server/llm/llmText.test.ts:266 
                data: new URL("https://cdn.example.com/image.png"),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #4cd7dc2ed038f2c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/packages/shared/src/server/outbound-url/fetch.ts:154 
    const response = await fetch(currentUrl, fetchOptions);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #1b9cb8a7b11092c3 — Filesystem access.
repo/packages/shared/src/server/redis/redis.ts:3 
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #446a7eba4c92acaa — Filesystem access.
repo/packages/shared/src/server/redis/redis.ts:82 
        ? fs.readFileSync(env.REDIS_TLS_CA_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #072de724b88246ab — Filesystem access.
repo/packages/shared/src/server/redis/redis.ts:85 
        ? fs.readFileSync(env.REDIS_TLS_CERT_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #794be1c6d56cc31c — Filesystem access.
repo/packages/shared/src/server/redis/redis.ts:88 
        ? fs.readFileSync(env.REDIS_TLS_KEY_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

next-auth

npm dependency
high pii_flow dependency Excluded from app score #3609778965005391 — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/[email protected]/core/lib/oauth/callback.js:86 · flow /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/core/lib/oauth/callback.js:83 → /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/core/lib/oauth/callback.js:86 
      const response = await provider.token.request({
        provider,
        params,
        checks,
        client
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow dependency Excluded from app score #91fc35087ddcde02 — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/[email protected]/core/lib/oauth/callback.js:103 · flow /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/core/lib/oauth/callback.js:83 → /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/core/lib/oauth/callback.js:103 
      profile = await provider.userinfo.request({
        provider,
        tokens,
        client
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow dependency Excluded from app score #253f07b355104591 — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:91 · flow /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:87 → /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:91 
      const response = await provider.token.request({
        provider,
        params,
        checks,
        client,
      })

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow dependency Excluded from app score #fb09640621dd2062 — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:111 · flow /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:87 → /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:111 
      profile = await provider.userinfo.request({
        provider,
        tokens,
        client,
      })

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium pii_flow dependency Excluded from app score #7becb3e21c743695 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/providers/trakt.js:22 · flow /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/providers/trakt.js:23 → /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/providers/trakt.js:22 
          headers: {
            Authorization: `Bearer ${context.tokens.access_token}`,
            "trakt-api-version": "2",
            "trakt-api-key": context.provider.clientId
          }

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #d7afa9bcd99ab468 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/src/providers/trakt.ts:34 · flow /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/src/providers/trakt.ts:35 → /tmp/closeopen-fiqmn297/pkgs/npm/[email protected]/src/providers/trakt.ts:34 
          headers: {
            Authorization: `Bearer ${context.tokens.access_token}`,
            "trakt-api-version": "2",
            "trakt-api-key": context.provider.clientId as string,
          },

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 65 low-confidence finding(s)
low egress dependency Excluded from app score #aa09feb9be89dc20 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/client/_utils.js:49 
          return fetch(url, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #c1d771f88c1c2fd6 — Environment-variable access.
pkgs/npm/[email protected]/core/lib/assert.js:28 
    if (!options.secret && process.env.NODE_ENV !== "production") warnings.push("NO_SECRET");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bb9083284ffa664 — Environment-variable access.
pkgs/npm/[email protected]/core/lib/assert.js:31 
  if (!options.secret && process.env.NODE_ENV === "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #3ba12258848ca54a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/core/lib/oauth/callback.js:48 
      let profile = await client.get(provider.profileUrl, tokens.oauth_token, tokens.oauth_token_secret);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #3989d151af39313b — Environment-variable access.
pkgs/npm/[email protected]/jwt/index.js:65 
    secureCookie = (_process$env$NEXTAUTH = (_process$env$NEXTAUTH2 = process.env.NEXTAUTH_URL) === null || _process$env$NEXTAUTH2 === void 0 ? void 0 : _process$env$NEXTAUTH2.startsWith("https://")) !== null && _process$env$NEXTAUTH !== void 0 ? _process$env$NEXTAUTH : !!process.env.VERCEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f21326417aef1ca — Environment-variable access.
pkgs/npm/[email protected]/jwt/index.js:70 
    secret = (_process$env$NEXTAUTH3 = process.env.NEXTAUTH_SECRET) !== null && _process$env$NEXTAUTH3 !== void 0 ? _process$env$NEXTAUTH3 : process.env.AUTH_SECRET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b36ef60f0ced1729 — Environment-variable access.
pkgs/npm/[email protected]/next/index.js:17 
  (_options$secret = options.secret) !== null && _options$secret !== void 0 ? _options$secret : options.secret = (_ref = (_options$jwt$secret = (_options$jwt = options.jwt) === null || _options$jwt === void 0 ? void 0 : _options$jwt.secret) !== null && _options$jwt$secret !== void 0 ? _options$jwt$secret : process.env.NEXTAUTH_SECRET) !== null && _ref !== void 0 ? _ref : process.env.AUTH_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad96adc21d804942 — Environment-variable access.
pkgs/npm/[email protected]/next/index.js:49 
  (_options$secret2 = options.secret) !== null && _options$secret2 !== void 0 ? _options$secret2 : options.secret = (_process$env$NEXTAUTH = process.env.NEXTAUTH_SECRET) !== null && _process$env$NEXTAUTH !== void 0 ? _process$env$NEXTAUTH : process.env.AUTH_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #813adefc6a7abe2f — Environment-variable access.
pkgs/npm/[email protected]/next/index.js:128 
  (_options$secret3 = (_options = options).secret) !== null && _options$secret3 !== void 0 ? _options$secret3 : _options.secret = (_process$env$NEXTAUTH2 = process.env.NEXTAUTH_SECRET) !== null && _process$env$NEXTAUTH2 !== void 0 ? _process$env$NEXTAUTH2 : process.env.AUTH_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4036159b682467ed — Environment-variable access.
pkgs/npm/[email protected]/next/index.js:155 
  if (!deprecatedWarningShown && process.env.NODE_ENV !== "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6dd0c72aa2e3ecfe — Environment-variable access.
pkgs/npm/[email protected]/next/middleware.js:22 
  const authPath = (0, _parseUrl.default)(process.env.NEXTAUTH_URL).path;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f551cddfdbe8fb4a — Environment-variable access.
pkgs/npm/[email protected]/next/middleware.js:27 
  const secret = (_ref = (_options$secret = options === null || options === void 0 ? void 0 : options.secret) !== null && _options$secret !== void 0 ? _options$secret : process.env.NEXTAUTH_SECRET) !== null && _ref !== void 0 ? _ref : process.env.AUTH_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #0372019c1b70921f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/providers/azure-ad.js:23 
      const response = await fetch(`https://graph.microsoft.com/v1.0/me/photos/${profilePhotoSize}x${profilePhotoSize}/$value`, {
        headers: {
          Authorization: `Bearer ${tokens.access_token}`
        }
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #799ae13268b5260e — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/providers/foursquare.js:23 
        const url = new URL("https://api.foursquare.com/v2/users/self");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f9d48fc7778ef27c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/providers/github.js:28 
          const res = await fetch("https://api.github.com/user/emails", {
            headers: {
              Authorization: `token ${tokens.access_token}`
            }
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6884cb9d79793c51 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/providers/hubspot.js:33 
        const response = await fetch(url, {
          headers: {
            "Content-Type": "application/json"
          },
          method: "GET"
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f091e737d4989fd6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/providers/linkedin.js:30 
      const emailResponse = await fetch("https://api.linkedin.com/v2/emailAddress?q=members&projection=(elements*(handle~))", {
        headers: {
          Authorization: `Bearer ${tokens.access_token}`
        }
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3d9bbb72f0f03549 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/providers/todoist.js:26 
        const res = await fetch("https://api.todoist.com/sync/v9/sync", {
          method: "POST",
          headers: {
            Authorization: `Bearer ${tokens.access_token}`,
            "Content-Type": "application/json"
          },
          body: JSON.stringify({
            sync_token: "*",
            resource_types: '["user"]'
          })
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #88b00ad958ad2199 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/providers/trakt.js:21 
        const res = await fetch("https://api.trakt.tv/users/me?extended=full", {
          headers: {
            Authorization: `Bearer ${context.tokens.access_token}`,
            "trakt-api-version": "2",
            "trakt-api-key": context.provider.clientId
          }
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #0cb1a6145b05fe9c — Environment-variable access.
pkgs/npm/[email protected]/react/index.js:53 
  baseUrl: (0, _parseUrl.default)((_process$env$NEXTAUTH = process.env.NEXTAUTH_URL) !== null && _process$env$NEXTAUTH !== void 0 ? _process$env$NEXTAUTH : process.env.VERCEL_URL).origin,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b79de23c8a58502e — Environment-variable access.
pkgs/npm/[email protected]/react/index.js:54 
  basePath: (0, _parseUrl.default)(process.env.NEXTAUTH_URL).path,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c60441bedc95a106 — Environment-variable access.
pkgs/npm/[email protected]/react/index.js:55 
  baseUrlServer: (0, _parseUrl.default)((_ref = (_process$env$NEXTAUTH2 = process.env.NEXTAUTH_URL_INTERNAL) !== null && _process$env$NEXTAUTH2 !== void 0 ? _process$env$NEXTAUTH2 : process.env.NEXTAUTH_URL) !== null && _ref !== void 0 ? _ref : process.env.VERCEL_URL).origin,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d42956b2718cfcb3 — Environment-variable access.
pkgs/npm/[email protected]/react/index.js:56 
  basePathServer: (0, _parseUrl.default)((_process$env$NEXTAUTH3 = process.env.NEXTAUTH_URL_INTERNAL) !== null && _process$env$NEXTAUTH3 !== void 0 ? _process$env$NEXTAUTH3 : process.env.NEXTAUTH_URL).path,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f67dfe3185c3a32 — Environment-variable access.
pkgs/npm/[email protected]/react/index.js:90 
  if (!value && process.env.NODE_ENV !== "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #97784bd616251a0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/react/index.js:324 
          return fetch("".concat(baseUrl, "/signout"), fetchOptions);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ebece7a3599aa3c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/client/_utils.ts:52 
    const res = await fetch(url, options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #53981d4cbc62b641 — Environment-variable access.
pkgs/npm/[email protected]/src/core/lib/assert.ts:54 
    if (!options.secret && process.env.NODE_ENV !== "production")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27e8b212120a23eb — Environment-variable access.
pkgs/npm/[email protected]/src/core/lib/assert.ts:60 
  if (!options.secret && process.env.NODE_ENV === "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #4caffd8e4c15961d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/core/lib/oauth/callback.ts:46 
      let profile: Profile = await (client as any).get(
        provider.profileUrl,
        tokens.oauth_token,
        tokens.oauth_token_secret
      )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #dbaab4803523c7ea — Filesystem access.
pkgs/npm/[email protected]/src/css/index.ts:4 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b95ff79b9a79247d — Environment-variable access.
pkgs/npm/[email protected]/src/css/index.ts:7 
const pathToCss = path.join(process.cwd(), process.env.NODE_ENV === "development" ? "node_modules/next-auth/css/index.css" : "/src/css/index.css")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #daebd2e8a2fc75aa — Filesystem access.
pkgs/npm/[email protected]/src/css/index.ts:10 
  return fs.readFileSync(pathToCss, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5946b01778748a65 — Environment-variable access.
pkgs/npm/[email protected]/src/jwt/index.ts:75 
    secureCookie = process.env.NEXTAUTH_URL?.startsWith("https://") ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42fca211d7e01447 — Environment-variable access.
pkgs/npm/[email protected]/src/jwt/index.ts:76 
      !!process.env.VERCEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c18cfb5540e85fed — Environment-variable access.
pkgs/npm/[email protected]/src/jwt/index.ts:83 
    secret = process.env.NEXTAUTH_SECRET ?? process.env.AUTH_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c7690b560a50158 — Environment-variable access.
pkgs/npm/[email protected]/src/next/index.ts:32 
    process.env.NEXTAUTH_SECRET ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8707475ff97c7f7c — Environment-variable access.
pkgs/npm/[email protected]/src/next/index.ts:33 
    process.env.AUTH_SECRET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a6bfff17edd41c5 — Environment-variable access.
pkgs/npm/[email protected]/src/next/index.ts:77 
  options.secret ??= process.env.NEXTAUTH_SECRET ?? process.env.AUTH_SECRET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74cda31ff056fd9d — Environment-variable access.
pkgs/npm/[email protected]/src/next/index.ts:204 
  options.secret ??= process.env.NEXTAUTH_SECRET ?? process.env.AUTH_SECRET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63422c5204e942ab — Environment-variable access.
pkgs/npm/[email protected]/src/next/index.ts:241 
  if (!deprecatedWarningShown && process.env.NODE_ENV !== "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5cd637b3ba07886 — Environment-variable access.
pkgs/npm/[email protected]/src/next/middleware.ts:108 
  const authPath = parseUrl(process.env.NEXTAUTH_URL).path

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b92f5f7b00cc023 — Environment-variable access.
pkgs/npm/[email protected]/src/next/middleware.ts:122 
    options?.secret ?? process.env.NEXTAUTH_SECRET ?? process.env.AUTH_SECRET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #3312bb73d3a3ac24 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/providers/azure-ad.ts:36 
      const response = await fetch(
        `https://graph.microsoft.com/v1.0/me/photos/${profilePhotoSize}x${profilePhotoSize}/$value`,
        { headers: { Authorization: `Bearer ${tokens.access_token}` } }
      )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #56e2ca22afa4b48b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/providers/foursquare.js:16 
        const url = new URL("https://api.foursquare.com/v2/users/self")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #17a163a72abf7e1a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/providers/foursquare.js:20 
        const req = get(url, { timeout: 3500 })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #591060be7ac4fe00 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/providers/github.ts:81 
          const res = await fetch("https://api.github.com/user/emails", {
            headers: { Authorization: `token ${tokens.access_token}` },
          })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5c01c6de2eea560f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/providers/hubspot.ts:46 
        const response = await fetch(url, {
          headers: {
            "Content-Type": "application/json",
          },
          method: "GET",
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e5c673d46b11b650 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/providers/linkedin.ts:44 
      const emailResponse = await fetch(
        "https://api.linkedin.com/v2/emailAddress?q=members&projection=(elements*(handle~))",
        { headers: { Authorization: `Bearer ${tokens.access_token}` } }
      )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4587c5ab5d671555 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/providers/todoist.ts:32 
        const res = await fetch("https://api.todoist.com/sync/v9/sync", {
          method: "POST",
          headers: {
            Authorization: `Bearer ${tokens.access_token}`,
            "Content-Type": "application/json",
          },
          body: JSON.stringify({
            sync_token: "*",
            resource_types: '["user"]',
          }),
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5faf353d9fc463ee — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/providers/trakt.ts:33 
        const res = await fetch("https://api.trakt.tv/users/me?extended=full", {
          headers: {
            Authorization: `Bearer ${context.tokens.access_token}`,
            "trakt-api-version": "2",
            "trakt-api-key": context.provider.clientId as string,
          },
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #8245df11b06c4ff8 — Environment-variable access.
pkgs/npm/[email protected]/src/react/index.tsx:50 
  baseUrl: parseUrl(process.env.NEXTAUTH_URL ?? process.env.VERCEL_URL).origin,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5258e7fa307113c4 — Environment-variable access.
pkgs/npm/[email protected]/src/react/index.tsx:51 
  basePath: parseUrl(process.env.NEXTAUTH_URL).path,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6996e6f4b77c213 — Environment-variable access.
pkgs/npm/[email protected]/src/react/index.tsx:53 
    process.env.NEXTAUTH_URL_INTERNAL ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21ebdee7fe634654 — Environment-variable access.
pkgs/npm/[email protected]/src/react/index.tsx:54 
      process.env.NEXTAUTH_URL ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d26731f0ef12d5f6 — Environment-variable access.
pkgs/npm/[email protected]/src/react/index.tsx:55 
      process.env.VERCEL_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fab87f30bbf82ebd — Environment-variable access.
pkgs/npm/[email protected]/src/react/index.tsx:58 
    process.env.NEXTAUTH_URL_INTERNAL ?? process.env.NEXTAUTH_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f276cdb7d40fb76 — Environment-variable access.
pkgs/npm/[email protected]/src/react/index.tsx:123 
  if (!value && process.env.NODE_ENV !== "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #205ed55d750b75cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/react/index.tsx:252 
  const res = await fetch(_signInUrl, {
    method: "post",
    headers: {
      "Content-Type": "application/x-www-form-urlencoded",
    },
    // @ts-expect-error
    body: new URLSearchParams({
      ...options,
      csrfToken: await getCsrfToken(),
      callbackUrl,
      json: true,
    }),
  })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e53e132ea7cdc60e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/react/index.tsx:314 
  const res = await fetch(`${baseUrl}/signout`, fetchOptions)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #53e092eac91ce7fa — Environment-variable access.
pkgs/npm/[email protected]/src/utils/detect-origin.ts:4 
  if (process.env.VERCEL ?? process.env.AUTH_TRUST_HOST)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1567358e51a780a4 — Environment-variable access.
pkgs/npm/[email protected]/src/utils/detect-origin.ts:8 
  return process.env.NEXTAUTH_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #8186cd97a3d8a842 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/utils/logger.ts:110 
        return await fetch(url, { method: "POST", body, keepalive: true })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #a898e84941fb31f7 — Environment-variable access.
pkgs/npm/[email protected]/utils/detect-origin.js:9 
  if ((_process$env$VERCEL = process.env.VERCEL) !== null && _process$env$VERCEL !== void 0 ? _process$env$VERCEL : process.env.AUTH_TRUST_HOST) return `${protocol === "http" ? "http" : "https"}://${forwardedHost}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3953113e1c5949b — Environment-variable access.
pkgs/npm/[email protected]/utils/detect-origin.js:10 
  return process.env.NEXTAUTH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #4744b0bfd1683dca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/utils/logger.js:88 
                return fetch(url, {
                  method: "POST",
                  body: body,
                  keepalive: true
                });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@ai-sdk/amazon-bedrock

npm dependency
high pii_flow dependency Excluded from app score #7bfd14eac35452cf — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:87 · flow /tmp/closeopen-fiqmn297/pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:76 → /tmp/closeopen-fiqmn297/pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:87 
    return fetch(input, {
      ...init,
      body,
      headers: combinedHeaders as HeadersInit,
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium pii_flow dependency Excluded from app score #99578af56962891e — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:90 · flow /tmp/closeopen-fiqmn297/pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:76 → /tmp/closeopen-fiqmn297/pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:90 
      headers: combinedHeaders as HeadersInit,

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 3 low-confidence finding(s)
low egress dependency Excluded from app score #4018c151e6dafcbe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:54 
      return fetch(input, {
        ...init,
        headers: headersWithUserAgent as HeadersInit,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #97173ce6c1df393a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:87 
    return fetch(input, {
      ...init,
      body,
      headers: combinedHeaders as HeadersInit,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0dbe4d22821ed39c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/bedrock-sigv4-fetch.ts:133 
    return fetch(input, {
      ...init,
      headers: finalHeaders as HeadersInit,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

dd-trace

npm dependency
medium telemetry dependency Excluded from app score #c07ed6f095364745 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/operations-taint-object.js:3 
const TaintedUtils = require('@datadog/native-iast-taint-tracking')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #fcb4e4a8d2ed977f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/operations.js:4 
const TaintedUtils = require('@datadog/native-iast-taint-tracking')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #dcb0a192138aec51 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/rewriter.js:57 
      const iastRewriter = require('@datadog/wasm-js-rewriter')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #6541ad3eed0b89cd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/rewriter.js:82 
    getPrepareStackTrace = require('@datadog/wasm-js-rewriter/js/stack-trace').getPrepareStackTrace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #95c1c109923d3075 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/rewriter.js:233 
    cacheRewrittenSourceMap = require('@datadog/wasm-js-rewriter/js/source-map').cacheRewrittenSourceMap

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #d55be8c466336341 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/iast/taint-tracking/taint-tracking-impl.js:4 
const TaintedUtils = require('@datadog/native-iast-taint-tracking')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #4de9cce9531a8cf6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/waf/waf_manager.js:36 
      const { DDWAF } = require('@datadog/native-appsec')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #397f0ab3098787b6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/telemetry.js:69 
  ciVisibilityMetrics.distribution(name, formatMetricTags(tags)).track(measure)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #00d893a534bfc14a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/config/stable.js:27 
      libdatadog = require('@datadog/libdatadog')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #0fc52081b8bfcfdd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/crashtracking/crashtracker.js:6 
const libdatadog = require('@datadog/libdatadog')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #bab328755545b08b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/llmobs/telemetry.js:92 
  llmobsMetrics.distribution('init_time', tags).track(initTimeMs)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #508ad9f310a3f1ea — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/llmobs/telemetry.js:97 
  llmobsMetrics.distribution('span.raw_size', tags).track(rawEventSize)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #ccff207e41ee1a0e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/llmobs/telemetry.js:103 
  llmobsMetrics.distribution('span.size', tags).track(eventSize)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #3a6c1dc546162290 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporter_cli.js:5 
const { SourceMapper, heap, encode } = require('@datadog/pprof')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a1db7b8c7ae7b2ad — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporters/agent.js:46 
      durationDistribution.track(perf.now() - start)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #537f1e02d7485a55 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporters/agent.js:63 
      sizeDistribution.track(form.size())

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #fb0e13100b4eb128 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/profiler.js:150 
              const zstdCompress = require('@datadog/libdatadog').load('datadog-js-zstd').zstd_compress

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #6c771884a8209183 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/profiler.js:176 
    const { setLogger, SourceMapper } = require('@datadog/pprof')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #772de1081ae24473 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/profilers/shared.js:16 
  const pprof = require('@datadog/pprof')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #114bdfefc3d75f42 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/profilers/space.js:35 
    this.#pprof = require('@datadog/pprof')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #39f5039cb22ac078 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/profilers/wall.js:167 
    this.#pprof = require('@datadog/pprof')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #2ccc6df2e3b45a7f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/runtime_metrics/runtime_metrics.js:57 
        nativeMetrics = require('@datadog/native-metrics')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #10efb11ca44735c9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/runtime_metrics/runtime_metrics.js:119 
      const handle = nativeMetrics.track(span)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #9b582101037597d1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/telemetry/metrics.js:78 
    return this.track(value)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #14703831af7a5c7e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/telemetry/metrics.js:82 
    return this.track(-value)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #80270853c9b9f156 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/telemetry/metrics.js:120 
    return this.track(value)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a80ab0ce331abc96 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/packages/dd-trace/src/tracer_metadata.js:8 
    const libdatadog = require('@datadog/libdatadog')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 91 low-confidence finding(s)
low env_fs dependency Excluded from app score #752d3513bda97be9 — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-esbuild/index.js:61 
const DD_IAST_ENABLED = process.env.DD_IAST_ENABLED?.toLowerCase() === 'true' || process.env.DD_IAST_ENABLED === '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #026950713f3ee4b0 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/index.js:261 
        const packageJson = JSON.parse(fs.readFileSync(/** @type {string} */(pathToPackageJson)).toString())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d923003f00e2bbe — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/index.js:346 
          contents = fs.readFileSync(args.path, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3064d4e33807bec — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/index.js:349 
        const fileCode = fs.readFileSync(args.path, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c67f3b084471d9d — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/index.js:388 
      const fileCode = fs.readFileSync(args.path, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #964ca432f8090b74 — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-esbuild/src/log.js:6 
const DD_TRACE_DEBUG = (process.env.DD_TRACE_DEBUG || '').trim().toLowerCase()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1316dee1ed9b2cf — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/src/utils.js:76 
    source: fs.readFileSync(fileURLToPath(url), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f85102893a0090ec — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-esbuild/src/utils.js:204 
      const packageJsonContent = fs.readFileSync(packageJsonPath).toString()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #454b21a0e45b6b89 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c69c273bf0e9b01c — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:78 
    const content = fs.readFileSync(originalSupportFile, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4be4a96e86415aee — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:98 
    fs.writeFileSync(wrapperFile, wrapperContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9588bd99044dca41 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:245 
      const pkg = JSON.parse(fs.readFileSync(candidate, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e679eabe7b1cef0c — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:309 
  fs.writeFileSync(wrapperFile, body)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a267c7b2049bd68 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:321 
    const { version } = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89b6d7dba055141a — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:340 
  const previousCompilerOptions = process.env.TS_NODE_COMPILER_OPTIONS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #585822ebc546f2ba — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:350 
  process.env.TS_NODE_COMPILER_OPTIONS = JSON.stringify({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #043fb170c5eb47a0 — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:357 
      delete process.env.TS_NODE_COMPILER_OPTIONS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9481e5ea55134fda — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/cypress-config.js:359 
      process.env.TS_NODE_COMPILER_OPTIONS = previousCompilerOptions

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #061f3419897fc1e6 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/helpers/rewriter/index.js:3 
const { readFileSync } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #daa1cf05e5a2b8f1 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/helpers/rewriter/index.js:86 
      const pkg = JSON.parse(readFileSync(
        join(basename, 'package.json'), 'utf8'
      ))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b0beb4224ed9851 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/jest.js:2344 
    const source = readFileSync(suiteFilePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0606bbc52746e02a — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-instrumentations/src/jest/coverage-backfill.js:110 
    sourceText = readFileSync(absoluteFile, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f3e407b785a333b — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-cypress/src/source-map-utils.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57938a184b887c0f — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-cypress/src/source-map-utils.js:92 
    return JSON.parse(fs.readFileSync(absoluteFilePath + '.map', 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2159d7bbf188c52a — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-cypress/src/source-map-utils.js:95 
    const content = fs.readFileSync(absoluteFilePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06277793722bc9de — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-cypress/src/source-map-utils.js:325 
    content = fs.readFileSync(absoluteFilePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df60ff1428278044 — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-jest/src/util.js:3 
const { readFileSync } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bf6332929cf4b4d — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-jest/src/util.js:76 
    testSource = readFileSync(test.path, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84a8de5238bfb4dc — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-plugin-nyc/src/index.js:59 
      const content = readFileSync(settingsCachePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f083a1ce889730eb — Filesystem access.
pkgs/npm/[email protected]/packages/datadog-webpack/index.js:155 
          packageJson = JSON.parse(fs.readFileSync(pkgJson).toString())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b385dee00f636542 — Environment-variable access.
pkgs/npm/[email protected]/packages/datadog-webpack/src/log.js:6 
const DD_TRACE_DEBUG = (process.env.DD_TRACE_DEBUG || '').trim().toLowerCase()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #d71cc29793be37ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/packages/dd-trace/src/aiguard/client.js:11 
  const response = await fetch(opts.url, {
    method: 'POST',
    headers,
    body: postData,
    signal: AbortSignal.timeout(opts.timeout),
  })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #e36ca124a65ca9c0 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/appsec/rule_manager.js:31 
    ? JSON.parse(readFileSync(config.rules, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2981a5763d1476d5 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/exporters/git/git_metadata.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #589e29f223993d21 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/exporters/git/git_metadata.js:146 
    const packFileContent = fs.readFileSync(packFileToUpload)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cff1e2591335bccb — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/fs-cache.js:62 
    const raw = fs.readFileSync(cachePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c0f41f5c28b931c — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/fs-cache.js:91 
    fs.writeFileSync(tmpPath, JSON.stringify({ timestamp: Date.now(), data }), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3ab78055ea3c5b8 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/fs-cache.js:136 
    fs.writeFileSync(tmpPath, String(Date.now()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #034244abac693cf3 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/fs-cache.js:167 
    const content = fs.readFileSync(getLockPath(cacheKey), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #0bd9c12ab7e0f0fa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/request.js:81 
      const req = client.request(opts, (res) => {
        // Capture non-2xx status code as soon as we see it so telemetry preserves it if the retry
        // fails with a network error (no HTTP response) before 'end' fires
        if (res.statusCode >= 400 && firstStatusCode === null) {
          firstStatusCode = res.statusCode
        }

        const chunks = []

        res.setTimeout(timeout)

        res.on('data', chunk => {
          chunks.push(chunk)
        })

        res.once('end', () => {
          const buffer = Buffer.concat(chunks)

          if (res.statusCode >= 200 && res.statusCode <= 299) {
            const isGzip = res.headers['content-encoding'] === 'gzip'
            if (isGzip) {
              zlib.gunzip(buffer, (err, result) => {
                if (err) {
                  log.error('Could not gunzip response: %s', err.message)
                  callback(null, '', res.statusCode)
                } else {
                  callback(null, result.toString(), res.statusCode)
                }
              })
            } else {
              callback(null, buffer.toString(), res.statusCode)
            }
            return
          }

          if (res.statusCode === 429 && !hasRetried) {
            const resetHeader = res.headers['x-ratelimit-reset']
            const resetTs = (resetHeader === null || resetHeader === undefined)
              ? Number.NaN
              : Number.parseInt(resetHeader, 10)
            const waitMs = Number.isFinite(resetTs) ? Math.max(0, resetTs * 1000 - Date.now()) : Number.NaN

            if (Number.isFinite(waitMs) && waitMs <= RATE_LIMIT_MAX_WAIT_MS) {
              hasRetried = true
              setTimeout(makeRequest, waitMs)
              return
            }

            if (!Number.isFinite(waitMs) || waitMs > RATE_LIMIT_MAX_WAIT_MS) {
              log.debug('Rate limited (429): drop payload (wait %sms > %sms or invalid header)',
                Number.isFinite(waitMs) ? waitMs : 'N/A', RATE_LIMIT_MAX_WAIT_MS)
            }
          } else if (res.statusCode >= 500 && !hasRetried) {
            try {
              if (req.socket) req.socket.destroy()
            } catch {
              // ignore
            }
            hasRetried = true
            setTimeout(makeRequest, singleJitteredDelay())
            return
          }

          const error = buildError(res, buffer, opts)
          // Use original status code if this is a failed retry
          callback(error, null, firstStatusCode === null ? res.statusCode : firstStatusCode)
        })
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #0baa2e23294fec58 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/requests/upload-coverage-report.js:45 
    const coverageContent = readFileSync(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b641dcbccb45e81 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/test-optimization-cache.js:36 
  process.env.DD_EXPERIMENTAL_TEST_OPT_SETTINGS_CACHE = cacheFilePath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee96b8d836ea1a0c — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/test-optimization-cache.js:52 
    return JSON.parse(readFileSync(settingsCachePath, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34cd1c5b7fe4e58c — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ci-visibility/test-optimization-cache.js:70 
    writeFileSync(settingsCachePath, JSON.stringify(cache), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #935317a1b0fad5c1 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/git_properties.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e15b7a2ac0e13b01 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/git_properties.js:86 
    const gitHeadContent = fs.readFileSync(gitHeadPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c81747802d54186 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/git_properties.js:104 
    const gitHeadRefContent = fs.readFileSync(gitHeadRefPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5834f9ea41191d8 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/parsers.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de119f57fb970065 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/parsers.js:120 
      return fs.readFileSync(raw, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2dcf15f342b58829 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/stable.js:4 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9229accfcd9c2508 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/config/stable.js:60 
      return fs.readFileSync(path, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e783e22757374ee — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/debugger/devtools_client/source-maps.js:4 
const { readFileSync } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a64d7720239e8bc — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/debugger/devtools_client/source-maps.js:17 
    return cacheIt(path, JSON.parse(await readFile(path, 'utf8')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10499c7a8bc1ac92 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/debugger/devtools_client/source-maps.js:24 
    return cacheIt(path, JSON.parse(readFileSync(path, 'utf8')))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5027d1c633c4dfa2 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/debugger/index.js:3 
const { readFile } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb1f4d2ad74efe4e — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/debugger/index.js:245 
  readFile(path, 'utf8', (err, data) => {
    if (err) {
      log.error('[debugger] Failed to read probe file: %s', path, err)
      return
    }
    try {
      const parsedData = JSON.parse(data)
      log.debug('[debugger] Successfully parsed probe file: %s', path)
      cb(parsedData)
    } catch (err) {
      log.error('[debugger] Probe file (%s) is not valid JSON', path, err)
    }
  })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53456d005781df23 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/exporter.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb82c54101b5a59e — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/exporters/common/docker.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #285e3eaa86900ac3 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/exporters/common/docker.js:22 
  cgroup = fs.readFileSync('/proc/self/cgroup', 'utf8').trim()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #da5825daa0c21d15 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/packages/dd-trace/src/exporters/common/request.js:200 
      const req = client.request(options, (res) => onResponse(res, finalize))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6877a8043704945f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/packages/dd-trace/src/external-logger/src/index.js:111 
    const req = https.request(options, (res) => {
      tracerLogger.info(`statusCode: ${res.statusCode}`)
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #64a06c134cddff35 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/git_metadata.js:38 
      const fromProperties = getGitMetadataFromGitProperties(fs.readFileSync(gitPropertiesFile, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d80e01b5fed68a8 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/git_metadata.js:54 
      repositoryUrl = getRemoteOriginURL(fs.readFileSync(gitConfigPath, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b08e639c1e344938 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/index.js:16 
  var forced = isTrue(process.env.DD_INJECT_FORCE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94a9282f6528d23a — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/index.js:23 
  if (process.env.DD_INJECTION_ENABLED) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7485a0264e41703d — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/log.js:7 
var DD_TRACE_DEBUG = process.env.DD_TRACE_DEBUG

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c06b562ee253a690 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/log.js:8 
var DD_TRACE_LOG_LEVEL = process.env.DD_TRACE_LOG_LEVEL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57934cb65147caca — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/telemetry.js:3 
var fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1b80112e5e9d77f — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/telemetry.js:10 
if (!process.env.DD_INJECTION_ENABLED) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9215966b1538f538 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/telemetry.js:14 
var telemetryForwarderPath = process.env.DD_TELEMETRY_FORWARDER_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #268343a662028b06 — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/guardrails/telemetry.js:55 
  if (['1', 'true', 'True'].indexOf(process.env.DD_INJECT_FORCE) !== -1) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03426cbde293f5ba — Environment-variable access.
pkgs/npm/[email protected]/packages/dd-trace/src/log/index.js:88 
      (process.env.OTEL_LOG_LEVEL === 'debug' || config.enabled)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #5f0afa07403d1afe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/packages/dd-trace/src/opentelemetry/otlp/otlp_http_exporter_base.js:84 
    const req = http.request(options, (res) => {
      let data = ''

      res.on('data', (chunk) => {
        data += chunk
      })

      res.once('end', () => {
        // @ts-expect-error - res.statusCode can be undefined
        if (res.statusCode >= 200 && res.statusCode < 300) {
          resultCallback({ code: 0 })
        } else {
          const error = new Error(`HTTP ${res.statusCode}: ${data}`)
          resultCallback({ code: 1, error })
        }
      })
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #39cbd8bfb53760ef — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/pkg.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebcb295967e84c54 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/pkg.js:26 
    return JSON.parse(fs.readFileSync(filePath, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c74f80a9b75fdde8 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/ci.js:3 
const { readFileSync, readdirSync, existsSync } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a553467147bed9c — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/ci.js:104 
  return JSON.parse(readFileSync(path, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bc62ee2868a7dcc — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/ci.js:266 
    const content = readFileSync(filePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #800a45ea83ecb3c2 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/git-cache.js:5 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42dce8a9f4b128db — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/git-cache.js:64 
    return fs.readFileSync(cacheFilePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #748052e267f9344f — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/git-cache.js:75 
    fs.writeFileSync(cacheFilePath, result, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d21b433bc9e3a9d5 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/git.js:5 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f1c59e77ae723fd — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/test.js:4 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c43c6a4dd01e9f9 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/plugins/util/test.js:764 
      return fs.readFileSync(path.join(rootDir, location)).toString()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a023a9e5d36bae8 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporter_cli.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09bb3aca4267ff61 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporter_cli.js:69 
const profile = JSON.parse(fs.readFileSync(process.argv[5], 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3689363301f7aba5 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/profiling/exporters/file.js:3 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e07fbca113a551fd — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/require-package-json.js:4 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f78c04d52ff9705c — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/require-package-json.js:20 
    return JSON.parse(fs.readFileSync(candidate, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d621268397a2ea4 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/require-package-json.js:28 
        return JSON.parse(fs.readFileSync(candidate, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fa16f367508af60 — Filesystem access.
pkgs/npm/[email protected]/packages/dd-trace/src/ritm.js:4 
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

posthog-js

npm dependency
medium telemetry dependency Excluded from app score #d0a7054da2231568 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/customizations/setAllPersonProfilePropertiesAsPersonPropertiesForFlags.js:15 
    posthog.setPersonPropertiesForFlags(personProperties);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #1f85f50e97059374 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/entrypoints/crisp-chat-integration.js:22 
            var replayUrl = posthog.get_session_replay_url();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #10e940b861507f8b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/entrypoints/crisp-chat-integration.js:23 
            var personUrl = posthog.requestRouter.endpointFor('ui', "/project/".concat(posthog.config.token, "/person/").concat(posthog.get_distinct_id()));

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #25231e5d40602b75 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/entrypoints/crisp-chat-integration.js:37 
        sessionIdListenerUnsubscribe = posthog.onSessionId(function (sessionId) {
            if (!reportedSessionIds.has(sessionId)) {
                updateCrispChat();
                reportedSessionIds.add(sessionId);
            }
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #897e210ad3290db5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/entrypoints/intercom-integration.js:22 
            var replayUrl = posthog.get_session_replay_url();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #2f89b306e0531684 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/entrypoints/intercom-integration.js:23 
            var personUrl = posthog.requestRouter.endpointFor('ui', "/project/".concat(posthog.config.token, "/person/").concat(posthog.get_distinct_id()));

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #9611e3430e360c0f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/entrypoints/intercom-integration.js:32 
        sessionIdListenerUnsubscribe = posthog.onSessionId(function (sessionId) {
            if (!reportedSessionIds.has(sessionId)) {
                updateIntercom();
                reportedSessionIds.add(sessionId);
            }
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #d6b84919c1a30e44 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/entrypoints/logs.js:341 
                    if (args.length > 0 && !isCapturingLog && posthog.is_capturing()) {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #4c9a26ac0d810575 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/extensions/segment-integration.js:17 
        if (!ctx.event.userId && ctx.event.anonymousId !== posthog.get_distinct_id()) {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #571ae79fc83e8fbc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/extensions/segment-integration.js:20 
            posthog.reset();

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #d22f22c409ce683d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/extensions/segment-integration.js:22 
        if (ctx.event.userId && ctx.event.userId !== posthog.get_distinct_id()) {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #201df482e5e5e057 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/extensions/segment-integration.js:24 
            posthog.identify(ctx.event.userId);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #8e5e156d5a238229 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/extensions/segment-integration.js:26 
        var additionalProperties = posthog.calculateEventProperties(eventName, ctx.event.properties);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #7eb205b5a1f74ba3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/extensions/segment-integration.js:55 
            posthog.register({
                distinct_id: user.id(),
                $device_id: getSegmentAnonymousId(),
            });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #dae0a05552b74a28 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/extensions/surveys.js:881 
                posthog.capture(posthog_surveys_types_1.SurveyEventName.SHOWN, __assign(__assign((_a = {}, _a[posthog_surveys_types_1.SurveyEventProperties.SURVEY_NAME] = survey.name, _a[posthog_surveys_types_1.SurveyEventProperties.SURVEY_ID] = survey.id, _a[posthog_surveys_types_1.SurveyEventProperties.SURVEY_ITERATION] = survey.current_iteration, _a[posthog_surveys_types_1.SurveyEventProperties.SURVEY_ITERATION_START_DATE] = survey.current_iteration_start_date, _a), (surveyLanguage && (_b = {}, _b[posthog_surveys_types_1.SurveyEventProperties.SURVEY_LANGUAGE] = surveyLanguage, _b))), { sessionRecordingUrl: (_c = posthog.get_session_replay_url) === null || _c === void 0 ? void 0 : _c.call(posthog) }));

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #0c3b1d3f9b38c9ce — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/extensions/surveys/surveys-extension-utils.js:383 
    posthog.capture(posthog_surveys_types_1.SurveyEventName.SENT, __assign(__assign(__assign(__assign(__assign((_b = {}, _b[posthog_surveys_types_1.SurveyEventProperties.SURVEY_NAME] = survey.name, _b[posthog_surveys_types_1.SurveyEventProperties.SURVEY_ID] = survey.id, _b[posthog_surveys_types_1.SurveyEventProperties.SURVEY_ITERATION] = survey.current_iteration, _b[posthog_surveys_types_1.SurveyEventProperties.SURVEY_ITERATION_START_DATE] = survey.current_iteration_start_date, _b[posthog_surveys_types_1.SurveyEventProperties.SURVEY_SUBMISSION_ID] = surveySubmissionId, _b[posthog_surveys_types_1.SurveyEventProperties.SURVEY_COMPLETED] = isSurveyCompleted, _b), (surveyLanguage && (_c = {}, _c[posthog_surveys_types_1.SurveyEventProperties.SURVEY_LANGUAGE] = surveyLanguage, _c))), { sessionRecordingUrl: (_e = posthog.get_session_replay_url) === null || _e === void 0 ? void 0 : _e.call(posthog) }), (0, surveys_1.buildSurveyResponseProperties)(responses, survey)), properties), { $set: (_d = {},
            _d[(0, survey_utils_1.getSurveyInteractionProperty)(survey, 'responded')] = true,
            _d) }));

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a3b1d71386bb8f40 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/extensions/surveys/surveys-extension-utils.js:410 
    posthog.capture(posthog_surveys_types_1.SurveyEventName.DISMISSED, __assign(__assign(__assign({}, _buildSurveyEventProperties(survey, inProgressSurvey, posthog)), (surveyLanguage && (_a = {}, _a[posthog_surveys_types_1.SurveyEventProperties.SURVEY_LANGUAGE] = surveyLanguage, _a))), { $set: (_b = {},
            _b[(0, survey_utils_1.getSurveyInteractionProperty)(survey, 'dismissed')] = true,
            _b) }));

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #4917408784356e01 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/lib/src/extensions/surveys/surveys-extension-utils.js:443 
    posthog.capture(posthog_surveys_types_1.SurveyEventName.ABANDONED, _buildSurveyEventProperties(survey, inProgressSurvey, posthog), {
        transport: 'sendBeacon',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

posthog-node

npm dependency
medium telemetry dependency Excluded from app score #faa3191001379d51 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/src/extensions/express.ts:69 
    posthog.withContext(buildRequestContextData(posthog, req), () => next())

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #10d4a83d029c385c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/src/extensions/express.ts:98 
    posthog.addPendingPromise(
      ErrorTracking.buildEventMessage(
        posthog.getErrorPropertiesBuilder(),
        error,
        hint,
        contextData.distinctId,
        additionalProperties
      ).then((msg) => {
        return posthog._capturePreparedEvent(msg, false)
      })
    )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #fa3094a055cc3a11 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/src/extensions/express.ts:100 
        posthog.getErrorPropertiesBuilder(),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #1a2ab723287feb27 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/[email protected]/src/extensions/express.ts:106 
        return posthog._capturePreparedEvent(msg, false)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 2 low-confidence finding(s)
low egress dependency Excluded from app score #8ba1f2c3f5e5f385 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/client.ts:420 
    return this.options.fetch ? this.options.fetch(url, options) : fetch(url, options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b5a50dc81640cc06 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/extensions/feature-flags/feature-flags.ts:1020 
      return fetch(url, options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@ag-ui/client

npm dependency
expand_more 6 low-confidence finding(s)
low egress dependency Excluded from app score #9bb86e99aa894b2a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/agent/http.ts:61 
    this.fetch = config.fetch ?? ((url, requestInit) => fetch(url, requestInit));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #48197337ab5f4b8b — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/agent/subscriber.ts:286 
    hasProcess && (process.env.NODE_ENV === "test" || Boolean(process.env.VITEST_WORKER_ID));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9dca76c5e4566e81 — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/agent/subscriber.ts:289 
    (process.env.NODE_ENV === "development" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1eabc549aff0c216 — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/agent/subscriber.ts:290 
      process.env.NODE_ENV === "test" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11850c58854c83f9 — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/agent/subscriber.ts:291 
      Boolean(process.env.VITEST_WORKER_ID));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68180b6feda65833 — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/middleware/backward-compatibility-0-0-45.ts:39 
      process.env.SUPPRESS_TRANSFORMATION_WARNINGS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@astral-sh/ruff-wasm-web

npm dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #b3540dafba47d774 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/ruff_wasm.js:794 
        module_or_path = fetch(module_or_path);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@aws-sdk/credential-providers

npm dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #eb2ee5d8d94a5b9d — Environment-variable access.
pkgs/npm/@[email protected]/dist-cjs/index.js:246 
    return fromTemporaryCredentials$1(options, fromNodeProviderChain, async ({ profile = process.env.AWS_PROFILE }) => loadConfig({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1784cb2dbf6873aa — Environment-variable access.
pkgs/npm/@[email protected]/dist-es/fromTemporaryCredentials.js:5 
    return fromTemporaryCredentialsBase(options, fromNodeProviderChain, async ({ profile = process.env.AWS_PROFILE }) => loadConfig({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@ferrucc-io/emoji-picker

npm dependency
expand_more 27 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #5b313e08fc626527 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/demo/scripts/prerender.ts:23 
const template = readFileSync(join(distDir, "index.html"), "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #91169ff848b6df41 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/demo/scripts/prerender.ts:94 
  writeFileSync(outFile, html, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #4d071b4f308040e5 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/demo/scripts/updateNpmStats.ts:3 
import { writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #6a5105303565030d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/demo/scripts/updateNpmStats.ts:9 
    const response = await fetch(
      "https://api.npmjs.org/downloads/point/last-month/@ferrucc-io/emoji-picker",
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #ccc6efe1d786eefc — Filesystem access.
pkgs/npm/@[email protected]__reposrc/demo/scripts/updateNpmStats.ts:17 
    writeFileSync(
      join(__dirname, "../src/constants/npmStats.ts"),
      statsContent,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #17c61eab4aba2a43 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/e2e/playwright.config.ts:23 
    reuseExistingServer: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #65dd7cd03c488d82 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:2 
import { readFileSync, writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #f522b62e6fc745b3 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:13 
      const content = readFileSync(testColorFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #738f4a4ac47d01da — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:14 
      writeFileSync(backupFilePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9d73074287fd2809 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:23 
      const content = readFileSync(backupFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #7bad2b993dc7084f — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:24 
      writeFileSync(testColorFilePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #fe4aaa42fedc638e — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:80 
    writeFileSync(testColorFilePath, fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ce3bc8b45bfd10d9 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/__tests__/generateEmojiColors.test.ts:83 
    const content = readFileSync(testColorFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #81976aeb174b2760 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/generateEmojiColors.ts:4 
import { writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #205a9b6dd0229a36 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/generateEmojiColors.ts:88 
  writeFileSync(outputPath, fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0527c77acb110953 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/generateEmojiColors.ts:140 
      writeFileSync(outputPath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #7466f379ab1eb999 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/release.ts:1 
import { readFileSync, writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #34c78b4df6a1bd5b — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/release.ts:24 
  const pkg = JSON.parse(readFileSync('./package.json', 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #223a3009d9c0ac36 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/release.ts:30 
  writeFileSync('./package.json', JSON.stringify(pkg, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d9e4c95e4c06910b — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/test-react-versions.ts:4 
import { existsSync, mkdirSync, writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c234c95d0c5e2dbf — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/test-react-versions.ts:56 
  writeFileSync(resolve(testDir, 'package.json'), JSON.stringify(packageJson, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0bb7a3b838e0cbb4 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/scripts/test-react-versions.ts:101 
  writeFileSync(resolve(testDir, 'emojiPicker.test.tsx'), testFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b0e3e10dd1d7262 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/src/utils/emojiSupport.ts:116 
  if (typeof process !== 'undefined' && process.env.NODE_ENV === 'test') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b364526d766747d2 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/packages/emoji-picker/src/utils/loadJsonData.ts:31 
    return JSON.parse(fs.readFileSync(filePath, 'utf8')) as T;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9db1501259c47de6 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/release.ts:1 
import { readFileSync, writeFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #01dcae0e070a9c42 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/release.ts:24 
  const pkg = JSON.parse(readFileSync('./package.json', 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #26c16a092099b773 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/release.ts:30 
  writeFileSync('./package.json', JSON.stringify(pkg, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@hookform/resolvers

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #2385975dbc0e0ac6 — Environment-variable access.
pkgs/npm/@[email protected]/yup/src/yup.ts:97 
      if (schemaOptions?.context && process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@mastra/mcp

npm dependency
expand_more 10 low-confidence finding(s)
low env_fs dependency Excluded from app score #778be89b84407ac7 — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:136 
  if (process.env.NODE_OPTIONS?.includes('dd-trace')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #51dac02b2f69d024 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:638 
    return await this.client.request({ method: 'resources/list' }, ListResourcesResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6ca4eb2f6c958222 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:645 
    return await this.client.request({ method: 'resources/read', params: { uri } }, ReadResourceResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #311fe83cf31b6fae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:652 
    return await this.client.request({ method: 'resources/subscribe', params: { uri } }, EmptyResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1f29da631105847a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:659 
    return await this.client.request({ method: 'resources/unsubscribe', params: { uri } }, EmptyResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #eb54a2cb066c363b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:666 
    return await this.client.request({ method: 'resources/templates/list' }, ListResourceTemplatesResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #606012b6b9041b95 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:676 
    return await this.client.request({ method: 'prompts/list' }, ListPromptsResultSchema, {
      timeout: this.timeout,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5bb2d2619e637aa6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/client/client.ts:688 
    return await this.client.request(
      { method: 'prompts/get', params: { name, arguments: args } },
      GetPromptResultSchema,
      { timeout: this.timeout },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #dc5edd774b6c3092 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__sourcemap/src/server/oauth-middleware.ts:314 
      const response = await fetch(introspectionEndpoint, {
        method: 'POST',
        headers,
        body: new URLSearchParams({
          token,
          token_type_hint: 'access_token',
        }),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #2e74ca49b9a970e0 — Filesystem access.
pkgs/npm/@[email protected]__sourcemap/src/server/server.ts:472 
        html = readFileSync(appResource.htmlPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@modelcontextprotocol/sdk

npm dependency
expand_more 38 low-confidence finding(s)
low egress tooling Excluded from app score unknown #4c32ae70fe46f27f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/scripts/cli.ts:54 
    await client.request({ method: 'resources/list' }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #eb1f5b347d22a482 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:16 
    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #8709c938a23f03ec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:32 
    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #0dc8ac51082e3ff3 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:77 
        writeFileSync(outputPath, fullContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d47713e3e3058817 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/client/stdio.ts:71 
        const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #cd4651146730e468 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/elicitationUrlExample.ts:632 
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #be9af88c278c7121 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/elicitationUrlExample.ts:663 
        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #961878cee54f19de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/multipleClientsParallel.ts:64 
        const result = await client.request(toolRequest, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #5187a74a48ba4d70 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:95 
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #04c8a9879d53775e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:167 
            return client
                .request(request, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #74d295b83b2365d6 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:26 
const DEFAULT_SERVER_URL = process.env.MCP_SERVER_URL || 'http://localhost:3000/mcp';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e4745d0db8407500 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:29 
    const clientId = process.env.MCP_CLIENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #07ea84a35ec85e1c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:36 
    const privateKeyPem = process.env.MCP_CLIENT_PRIVATE_KEY_PEM;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9bd9a07837bd7afc — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:38 
        const algorithm = process.env.MCP_CLIENT_ALGORITHM || 'RS256';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b77a4221d5f5fd96 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:48 
    const clientSecret = process.env.MCP_CLIENT_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #a21d376a4de743ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:232 
            const result = await this.client.request(request, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #48c32b69f80eb07e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:290 
            const result = await this.client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #ffbd22f67a1b781a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:510 
                const resourcesResult = await client.request(
                    {
                        method: 'resources/list',
                        params: {}
                    },
                    ListResourcesResultSchema
                );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #07d1b63a936454f7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:601 
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #f5df8f4b7376402d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:632 
        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #1ad38235a1661eaa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:719 
        const result = await client.request(request, CallToolResultSchema, {
            resumptionToken: notificationsToolLastEventId,
            onresumptiontoken: onLastEventIdUpdate
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #2da9958faee37a32 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:748 
        const promptsResult = await client.request(promptsRequest, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #27c8164b3cce1e33 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:777 
        const promptResult = await client.request(promptRequest, GetPromptResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #6dc9ef41b3334d10 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:798 
        const resourcesResult = await client.request(resourcesRequest, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #420e99d56c01649b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:826 
        const result = await client.request(request, ReadResourceResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #9057c86b5d40327a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/ssePollingClient.ts:75 
        const result = await client.request(
            {
                method: 'tools/call',
                params: {
                    name: 'long-task',
                    arguments: {}
                }
            },
            CallToolResultSchema,
            {
                // Track resumption tokens for debugging
                onresumptiontoken: token => {
                    lastEventId = token;
                    console.log(`[Event ID] ${token}`);
                }
            }
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #26938e85233e86ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:139 
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #c3488fdbfa9706e6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:172 
        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #b5fc615362116c06 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationFormExample.ts:350 
    const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5de6cb8825c69d5f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:215 
const MCP_PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5786c87c7b658dc9 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:216 
const AUTH_PORT = process.env.MCP_AUTH_PORT ? parseInt(process.env.MCP_AUTH_PORT, 10) : 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #9003980258fbf08c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:245 
        const response = await fetch(endpoint, {
            method: 'POST',
            headers: {
                'Content-Type': 'application/x-www-form-urlencoded'
            },
            body: new URLSearchParams({
                token: token
            }).toString()
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #2594923902dafd62 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/honoWebStandardStreamableHttp.ts:69 
const PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #574fa6bf62e10ff1 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:621 
const MCP_PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #95e5cc6898405e0a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:622 
const AUTH_PORT = process.env.MCP_AUTH_PORT ? parseInt(process.env.MCP_AUTH_PORT, 10) : 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #31c3a133f9d2a810 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:643 
            const response = await fetch(endpoint, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded'
                },
                body: new URLSearchParams({
                    token: token
                }).toString()
            });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #046524976572131e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleTaskInteractive.ts:448 
const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 8000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80969d9c8512d693 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.ts:12 
    process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL === 'true' || process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@paralleldrive/cuid2

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #7266069b53c2fde7 — Filesystem access.
pkgs/npm/@[email protected]/bin/cuid2.js:4 
import { writeFileSync, readFileSync, existsSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a0db033821507b9 — Filesystem access.
pkgs/npm/@[email protected]/bin/cuid2.js:51 
      const content = readFileSync(configPath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd451f5fdff57488 — Filesystem access.
pkgs/npm/@[email protected]/bin/cuid2.js:60 
        writeFileSync(configPath, newContent, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@prisma/instrumentation

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #34bb401ff95bd62f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/ActiveTracingHelper.ts:21 
const showAllTraces = process.env.PRISMA_SHOW_ALL_TRACES === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@tanstack/react-query

npm dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #79968ac03d38ea71 — Environment-variable access.
pkgs/npm/@[email protected]/src/useBaseQuery.ts:44 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fb8f900f68f2016 — Environment-variable access.
pkgs/npm/@[email protected]/src/useBaseQuery.ts:69 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e975bc395c348a0 — Environment-variable access.
pkgs/npm/@[email protected]/src/useSuspenseInfiniteQuery.ts:34 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #916ae421fd4a0e20 — Environment-variable access.
pkgs/npm/@[email protected]/src/useSuspenseQueries.ts:194 
        if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76d4e6f09b814e38 — Environment-variable access.
pkgs/npm/@[email protected]/src/useSuspenseQuery.ts:17 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@trpc/client

npm dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #6aaafea3970697a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/links/wsLink/wsLink.ts:40 
        const requestSubscription = client
          .request({
            op,
            transformer,
          })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@trpc/next

npm dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #6f0d06fef05cc64e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/app-dir/links/nextHttp.ts:52 
        return fetch(url, {
          ...fetchOpts,
          // cache: 'no-cache',
          next: {
            revalidate,
            tags: [cacheTag],
          },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

chroma-js

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #fb484d733142d592 — Filesystem access.
pkgs/npm/[email protected]/.bin/update-version.cjs:2 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7627a68afd94c228 — Filesystem access.
pkgs/npm/[email protected]/.bin/update-version.cjs:8 
const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8009fb83560922b — Filesystem access.
pkgs/npm/[email protected]/.bin/update-version.cjs:13 
fs.writeFileSync(versionFilePath, versionFileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

core-js

npm dependency
expand_more 6 low-confidence finding(s)
low egress dependency Excluded from app score #3eafed0ff0fb73e9 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/internals/url-constructor-detection.js:32 
    || new URL('https://a@b').username !== 'a'

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2a002684565e47a7 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/internals/url-constructor-detection.js:35 
    || new URL('https://тест').host !== 'xn--e1aybc'

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f79b8677cc11d00b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/internals/url-constructor-detection.js:37 
    || new URL('https://a#б').hash !== '#%D0%B1'

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #e508ecf6a97ad857 — Filesystem access.
pkgs/npm/[email protected]/postinstall.js:4 
var fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0699938a36e5d271 — Filesystem access.
pkgs/npm/[email protected]/postinstall.js:44 
      banners = JSON.parse(fs.readFileSync(file));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fa5e152c64eb004 — Filesystem access.
pkgs/npm/[email protected]/postinstall.js:52 
    fs.writeFileSync(file, JSON.stringify(banners), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fastest-levenshtein

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #ce5d4d531f4fc7a4 — Filesystem access.
pkgs/npm/[email protected]/bench.js:8 
var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7a82e057ebf7a6d — Filesystem access.
pkgs/npm/[email protected]/bench.js:43 
    fs.writeFileSync("data.json", JSON.stringify(data_1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f49509ba1929e8e5 — Filesystem access.
pkgs/npm/[email protected]/bench.js:45 
var data = JSON.parse(fs.readFileSync("data.json", "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ioredis

npm dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #45029d55e2962479 — Filesystem access.
pkgs/npm/[email protected]/built/utils/index.js:4 
const fs_1 = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4a46cf5090e82d0 — Filesystem access.
pkgs/npm/[email protected]/built/utils/index.js:362 
        const data = await fs_1.promises.readFile(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jsonpath-plus

npm dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #36ad8c75b9795845 — Filesystem access.
pkgs/npm/[email protected]/bin/jsonpath-cli.js:2 
import {readFile} from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0dc08c9b3b3c10dc — Filesystem access.
pkgs/npm/[email protected]/bin/jsonpath-cli.js:9 
    const json = JSON.parse(await readFile(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

langfuse

npm dependency
expand_more 6 low-confidence finding(s)
low egress dependency Excluded from app score #dabdcab171a2ad33 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.cjs.js:174 
    this.customFetch = (...fetchParams) => fetch(...fetchParams);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #17364f3faf503608 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.cjs.js:1477 
    return fetch(url, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fb3fc3e56205916d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.cjs.js:1519 
    return fetch(url, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1c901c8b8f5194b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.mjs:171 
    this.customFetch = (...fetchParams) => fetch(...fetchParams);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #34ba699610c21ef1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.mjs:1474 
    return fetch(url, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e820c018a23e6189 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/index.mjs:1516 
    return fetch(url, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

nanoid

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #5185656c7cb2aa8b — Filesystem access.
pkgs/npm/[email protected]/bin/nanoid.js:18 
  let json = readFileSync(join(import.meta.dirname, '..', 'package.json'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

protobufjs

npm dependency
expand_more 8 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #70c96c30f2519216 — Filesystem access.
pkgs/npm/[email protected]/scripts/postinstall.js:3 
var path = require("path"),
    fs   = require("fs"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c289ffe8519c298a — Filesystem access.
pkgs/npm/[email protected]/scripts/postinstall.js:4 
    fs   = require("fs"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e5d17b6bcae9f076 — Filesystem access.
pkgs/npm/[email protected]/scripts/postinstall.js:17 
    basePkg = JSON.parse(fs.readFileSync(path.join(__dirname, "..", "..", "package.json")));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #7847577ea46f5e34 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/root.js:159 
                            fetch(resolved, false, depth + 1);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b5378062c7f1e4d7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/root.js:163 
                            fetch(resolved, true, depth + 1);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #397081c7c29d411a — Filesystem access.
pkgs/npm/[email protected]/src/root.js:203 
                source = util.fs.readFileSync(filename).toString("utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #c52b31e53bd9b5d1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/root.js:239 
            fetch(resolved);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #b04cf31ae71c1c4c — Filesystem access.
pkgs/npm/[email protected]/src/util/fs.js:5 
    fs = require(/* webpackIgnore: true */ "fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • @baselime/trpc-opentelemetry-middleware prod — dist-only: no readable source
  • @codemirror/autocomplete prod — dist-only: no readable source
  • @codemirror/language prod — dist-only: no readable source
  • @codemirror/lint prod — dist-only: no readable source
  • @codemirror/search prod — dist-only: no readable source
  • @codemirror/state prod — dist-only: no readable source
  • @langfuse/shared prod — registry 404
  • @next-auth/prisma-adapter prod — dist-only: no readable source
  • @radix-ui/react-switch prod — dist-only: no readable source
  • @radix-ui/react-tabs prod — dist-only: no readable source
  • @radix-ui/react-toggle prod — dist-only: no readable source
  • @radix-ui/react-toggle-group prod — dist-only: no readable source
  • @radix-ui/react-tooltip prod — dist-only: no readable source
  • @t3-oss/env-nextjs prod — dist-only: no readable source
  • bullmq prod — dist-only: no readable source
  • class-variance-authority prod — dist-only: no readable source
  • cmdk prod — dist-only: no readable source
  • https-proxy-agent prod — dist-only: no readable source
  • json-schema-faker prod — dist-only: no readable source
  • next prod — tarball exceeds byte cap
  • next-themes prod — dist-only: no readable source
  • prism-react-renderer prod — dist-only: no readable source
  • rate-limiter-flexible prod — scan budget exceeded
  • react prod — scan budget exceeded
  • react-day-picker prod — scan budget exceeded
  • react-dom prod — scan budget exceeded
  • react-dropzone prod — scan budget exceeded
  • react-grid-layout prod — scan budget exceeded
  • react-hook-form prod — scan budget exceeded
  • react-icons prod — scan budget exceeded
  • react-markdown prod — scan budget exceeded
  • react-resizable prod — scan budget exceeded
  • react-resizable-panels prod — scan budget exceeded
  • react-responsive prod — scan budget exceeded
  • react18-json-view prod — scan budget exceeded
  • recharts prod — scan budget exceeded
  • remark-gfm prod — scan budget exceeded
  • sonner prod — scan budget exceeded
  • streamdown prod — scan budget exceeded
  • stripe prod — scan budget exceeded
  • superjson prod — scan budget exceeded
  • tailwind-merge prod — scan budget exceeded
  • tailwindcss-animate prod — scan budget exceeded
  • use-query-params prod — scan budget exceeded
  • uuid prod — scan budget exceeded
  • vaul prod — scan budget exceeded
  • yaml prod — scan budget exceeded
  • zod prod — scan budget exceeded
  • zustand prod — scan budget exceeded
  • @anthropic-ai/tokenizer prod — scan budget exceeded
  • @opentelemetry/instrumentation-express prod — scan budget exceeded
  • @opentelemetry/instrumentation-undici prod — scan budget exceeded
  • @prisma/client prod — scan budget exceeded
  • exponential-backoff prod — scan budget exceeded
  • express prod — scan budget exceeded
  • helmet prod — scan budget exceeded
  • p-limit prod — scan budget exceeded
  • tiktoken prod — scan budget exceeded
  • @eslint/js prod — scan budget exceeded
  • @repo/eslint-plugin prod — scan budget exceeded
  • eslint-config-next prod — scan budget exceeded
  • eslint-config-prettier prod — scan budget exceeded
  • eslint-config-turbo prod — scan budget exceeded
  • eslint-plugin-only-warn prod — scan budget exceeded
  • typescript-eslint prod — scan budget exceeded
  • @ai-sdk/anthropic prod — scan budget exceeded
  • @ai-sdk/azure prod — scan budget exceeded
  • @ai-sdk/google prod — scan budget exceeded
  • @ai-sdk/google-vertex prod — scan budget exceeded
  • @ai-sdk/openai prod — scan budget exceeded
  • @ai-sdk/openai-compatible prod — scan budget exceeded
  • @aws-sdk/client-cloudwatch prod — scan budget exceeded
  • @aws-sdk/client-lambda prod — scan budget exceeded
  • @aws-sdk/client-s3 prod — scan budget exceeded
  • @aws-sdk/client-sesv2 prod — scan budget exceeded
  • @aws-sdk/lib-storage prod — scan budget exceeded
  • @aws-sdk/s3-request-presigner prod — scan budget exceeded
  • @azure/storage-blob prod — scan budget exceeded
  • @clickhouse/client prod — scan budget exceeded
  • @google-cloud/storage prod — scan budget exceeded
  • @opentelemetry/otlp-transformer prod — scan budget exceeded
  • @react-email/components prod — scan budget exceeded
  • @react-email/render prod — scan budget exceeded
  • @slack/oauth prod — scan budget exceeded
  • @slack/web-api prod — scan budget exceeded
  • @smithy/node-http-handler prod — scan budget exceeded
  • ai prod — scan budget exceeded
  • ajv prod — scan budget exceeded
  • ajv-formats prod — scan budget exceeded
  • google-auth-library prod — scan budget exceeded
  • ipaddr.js prod — scan budget exceeded
  • langfuse-langchain prod — scan budget exceeded
  • lossless-json prod — scan budget exceeded
  • lru-cache prod — scan budget exceeded
  • nodemailer prod — scan budget exceeded
  • oci-common prod — scan budget exceeded
  • oci-objectstorage prod — scan budget exceeded
  • safe-regex2 prod — scan budget exceeded
  • slackify-markdown prod — scan budget exceeded
  • undici prod — scan budget exceeded
  • winston prod — scan budget exceeded