Close Open Privacy Scan
App Privacy Score
Low risk · 1104 finding(s)
Based on: 1 first-party package(s) · 5/7 deps analyzed
Dependency score: 82 (Low risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
aggregate.ee.engr.uky.eduapi.nuget.orgapi.slack.comapi.telegram.orgarxiv.orgbetterexplained.combugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcdn.mathjax.orgcens.ioc.eecode.activestate.comcore.telegram.orgcrates.iodata-apis.orgdevblogs.nvidia.comdigitalassets.lib.berkeley.edudiscord.comdiscordpy.readthedocs.iodmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.nvidia.comdocs.pytest.orgdocs.python.orgdocs.rsdocs.scipy.orgdoi.orgen.wikipedia.orggcc.gnu.orggithub.comgitlab.freedesktop.orggraphics.stanford.edugroups.google.comimageio.readthedocs.ioimg.shields.ioipython.orgipywidgets.readthedocs.ioitanium-cxx-abi.github.ioj3-fortran.orgjupyter-client.readthedocs.orglibsdl.orglists.llvm.orgllvm.orgmathworld.wolfram.commatplotlib.orgmembers.loria.frmesonbuild.commetacpan.orgnbformat.readthedocs.orgnicolas.limare.netnumba.discourse.groupnumba.pydata.orgnumba.readthedocs.ionumpy.orgnumpydoc.readthedocs.iooeis.orgopenaipublic.azureedge.netopenaipublic.blob.core.windows.netpackages.msys2.orgpandas.pydata.orgpeople.eecs.berkeley.edupersonal.math.ubc.capyinstaller.readthedocs.iopypi.orgpypi.python.orgraw.githubusercontent.comschemas.microsoft.comscikit-image.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgsourceware.orgssabook.gforge.inria.frstackoverflow.comtechnet.microsoft.comtqdm.github.iotravis-ci.comtruststore.readthedocs.iotyping.python.orgunlicense.orgviews.scientific-python.orgw.wikiweb.archive.orgwiki.ubuntu.comwixtoolset.orgwrapdb.mesonbuild.comwww-cs-faculty.stanford.eduwww.ams.orgwww.ecma-international.orgwww.google.comwww.intel.comwww.kernel.orgwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.numberanalytics.comwww.oasis-open.orgwww.openblas.netwww.picloud.comwww.python.orgwww.scipy.orgwww.stixfonts.orgwww.tysto.comwww.w3.orgwww.xyz.eduwww.youtube.com
</> First-Party Code
first-party (python)
python first-partyexpand_more 10 low-confidence finding(s)
low env_fs — Filesystem access. 8 locations
with urllib.request.urlopen(url) as source, open(download_target, "wb") as output:Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
download_root = os.path.join(os.getenv("XDG_CACHE_HOME", default), "whisper")Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
</> Dependencies
more-itertools
python dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
numba
python dependencyexpand_more 74 low-confidence finding(s)
low env_fs — Filesystem access. 47 locations
low env_fs — Environment-variable access. 27 locations
numpy
python dependencyexpand_more 982 low-confidence finding(s)
low env_fs — Filesystem access. 618 locations
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57
low env_fs — Environment-variable access. 356 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
tiktoken
python dependencyexpand_more 16 low-confidence finding(s)
low env_fs — Environment-variable access. 5 locations
low env_fs — Filesystem access. 8 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations
tqdm
python dependencyexpand_more 20 low-confidence finding(s)
low env_fs — Filesystem access. 10 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low env_fs — Environment-variable access. 5 locations
Skipped dependencies
Production
- torch prod — no sdist (wheels only)
- triton prod — no sdist (wheels only)