Close Open Privacy Scan
App Privacy Score
Medium risk · 1479 finding(s)
Based on: 1 first-party package(s) · 6/7 deps analyzed
Dependency score: 82 (Low risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
687fb701029421ae5549d998--8000.hf.jobsaggregate.ee.engr.uky.eduapi-inference.huggingface.coapi.cerebras.aiapi.cohere.comapi.deepinfra.comapi.endpoints.huggingface.cloudapi.featherless.aiapi.fireworks.aiapi.github.comapi.groq.comapi.novita.aiapi.nuget.orgapi.openai.comapi.publicai.coapi.replicate.comapi.scaleway.aiapi.together.xyzapi.wavespeed.aiapi.z.aiarstechnica.comarxiv.orgblog.famzah.netbootlin.combugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcdn.britannica.comcdn.mathjax.orgcens.ioc.eecode.activestate.comcolab.research.google.comconsoledonottrack.comcoqui.aicrates.iodata-apis.orgdatasets-server.huggingface.codev-discuss.pytorch.orgdeveloper.android.comdeveloper.mozilla.orgdigitalassets.lib.berkeley.edudiscord.comdmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.github.comdocs.microsoft.comdocs.nvidia.comdocs.pytest.orgdocs.python.orgdocs.rsdocs.scipy.orgdoi.orgdvc.orgen.wikipedia.orgendpoints.huggingface.cofal.runfilesystem-spec.readthedocs.ioformulae.brew.shgcc.gnu.orggit-scm.comgit.kernel.orggithub.comgitlab.comgitlab.freedesktop.orggraphics.stanford.edugroups.google.comhf.cohub-ci.huggingface.cohub.my-company.comhuggingface.coimageio.readthedocs.ioinference.api.nscale.comipython.orgj3-fortran.orgjson-schema.orgjzgu0buei5.us-east-1.aws.endpoints.huggingface.cloudkeras.iolibsdl.orglinuxdevcenter.comlists.sourceforge.netmail.python.orgmathworld.wolfram.commatplotlib.orgmesonbuild.commetacpan.orgmy-text-to-image.region.vendor.endpoints.huggingface.cloudndjson.orgnew-url.comnew.webhook.sitenicolas.limare.netnumpy.orgnumpydoc.readthedocs.iooai.endpoints.kepler.ai.cloud.ovh.netonnxruntime.aipackages.msys2.orgpackaging.python.orgpandas.pydata.orgpeople.eecs.berkeley.edupersonal.math.ubc.caplatform.openai.compyinstaller.readthedocs.iopypi.orgpytorch.orgpyyaml.orgqueue.fal.runraw.githubusercontent.comrefspecs.linuxfoundation.orgrequests.readthedocs.iorouter.huggingface.coschemas.microsoft.comscikit-image.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgserverfault.comsourceware.orgstackoverflow.comstorage.googleapis.comtldp.orgtruststore.readthedocs.iotvm.apache.orgtyping.python.orgupload.wikimedia.orgviews.scientific-python.orgweb.archive.orgwebhook.sitewixtoolset.orgwrapdb.mesonbuild.comwww.ams.orgwww.brynosaurus.comwww.comet.comwww.deepspeed.aiwww.ecma-international.orgwww.google.comwww.ietf.orgwww.intel.comwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.oasis-open.orgwww.openblas.netwww.python-httpx.orgwww.scipy.orgwww.scivision.devwww.stixfonts.orgwww.systutorials.comwww.w3.orgwww.xyz.edux.com
</> First-Party Code
first-party (python)
python first-party self.writer.track(value, name=key, step=step, **kwargs)
A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
self.writer.track(aim_image, name=key, step=step, **track_kw)
A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 267 low-confidence finding(s)
low env_fs — Filesystem access. 43 locations
low env_fs — Environment-variable access. 224 locations
</> Dependencies
huggingface_hub
python dependencyexpand_more 185 low-confidence finding(s)
low env_fs — Filesystem access. 64 locations
low env_fs — Environment-variable access. 57 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 62 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
numpy
python dependencyexpand_more 982 low-confidence finding(s)
low env_fs — Filesystem access. 618 locations
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57
low env_fs — Environment-variable access. 356 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
packaging
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
psutil
python dependencyexpand_more 28 low-confidence finding(s)
low env_fs — Filesystem access. 19 locations
low env_fs — Environment-variable access. 7 locations
res = requests.get(url, timeout=REQUEST_TIMEOUT)
Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
req = urlopen(URL, **kwargs)
Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
pyyaml
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
safetensors
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
Skipped dependencies
Production
- torch prod — no sdist (wheels only)