Close Open Privacy Scan

link https://github.com/danny-avila/LibreChat
bolt Snapshot: commit 4321f68
science engine v1.5
schedule 2026-07-15T01:14:17.401630+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code. Dependency data flows are listed separately and do not affect this verdict.

smart_toy MCP server detected: @modelcontextprotocol/sdk, openai — detected in dependencies, not a safety judgment.

App Privacy Score

97 /100
Low privacy risk

Low risk · 39 finding(s)

Dependency score: 82 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 1 medium 38 low
First-party packages: 1
Dependency packages: 2
Ecosystem: go

swap_horiz Application data flows

No application data flows were found. See dependency data flows below.

hub Dependency data flows (1)
medium google.golang.org/protobuf dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:517 → pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520

</> First-Party Code

first-party (go): otel/langfuse-fanout

go first-party
expand_more 12 low-confidence finding(s)
low env_fs production #8b0ee68682677837 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:166 
	centralBaseURL := normalizeBaseURL(os.Getenv("LANGFUSE_FANOUT_CENTRAL_BASE_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b7e8bd97b553a1c — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:167 
	centralAuth := strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_CENTRAL_AUTH_HEADER"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #15a5f6432842a3ca — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:176 
	for _, item := range strings.Split(os.Getenv("LANGFUSE_FANOUT_TENANT_DESTINATIONS"), ",") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9981a26ce6cf3c58 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:193 
	traceDestinationKeys := parseDestinationKeys(os.Getenv("LANGFUSE_FANOUT_TRACE_DESTINATION_KEYS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6711665762664c4c — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:202 
	rawPublicURL := strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_PUBLIC_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e44e0acdc78022c — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:207 
	redisURI := strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_REDIS_URI"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5c4c421ca8761e7 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:227 
			username:  strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_REDIS_USERNAME")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #305f0dc671bd5534 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:228 
			password:  strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_REDIS_PASSWORD")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2edea6dd3c8435a9 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:1163 
	if value := strings.TrimSpace(os.Getenv(key)); value != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12bd68d370fcba66 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:1171 
		if value := strings.TrimSpace(os.Getenv(key)); value != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a96928144b9f43b7 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:1179 
	switch strings.ToLower(strings.TrimSpace(os.Getenv(key))) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbb6348f9e74dbe8 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:1188 
	value := strings.TrimSpace(os.Getenv(key))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

google.golang.org/protobuf

go dependency
medium pii_flow dependency Excluded from app score #812067fd0ecf524b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 · flow /tmp/closeopen-yq2uhbg4/pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:517 → /tmp/closeopen-yq2uhbg4/pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 
		fmt.Printf("executing: %v\n%s\n", strings.Join(cmd.Args, " "), out)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 22 low-confidence finding(s)
low env_fs dependency Excluded from app score #b8997b544b4fe64e — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:117 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/wirefuzz/corpus/%x", sha1.Sum(wire)), wire, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f0501e06021a7b8 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:125 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/textfuzz/corpus/%x", sha1.Sum(text)), text, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6779999f0c408d58 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:133 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/jsonfuzz/corpus/%x", sha1.Sum(json)), json, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #077194c474c10775 — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:46 
	if plugin := os.Getenv("RUN_AS_PROTOC_PLUGIN"); plugin != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edf8bfa4967fb162 — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:85 
	flag.StringVar(&protoRoot, "protoroot", os.Getenv("PROTOBUF_ROOT"), "The root of the protobuf source tree.")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6cedcf0c77bcf47 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:119 
	out, err := os.Create(outFn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #109c42e6b7c619cb — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:124 
	b, err := os.ReadFile(inFn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #770e16f865a21239 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:424 
			check(os.WriteFile(filepath.Join(tmpDir, filepath.FromSlash(d.path+"/gen_test.go")), b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af4b4d9c8891ddf2 — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:517 
	cmd.Env = append(os.Environ(), "RUN_AS_PROTOC_PLUGIN=1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #870ad55f299ba207 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:718 
	src, err := os.ReadFile(srcPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #795aaa9b267da2d5 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:721 
	dst, _ := os.ReadFile(dstPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5f497d863184a6e — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:725 
	check(os.WriteFile(dstPath, src, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff881d49e08bd381 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:263 
		prev, _ := os.ReadFile(absFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6458d3ce6cd19fa8 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:266 
			check(os.WriteFile(absFile, b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acbc2a3389300e11 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:269 
		check(os.WriteFile(absFile+".tmp", b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10fa95fdfa428efa — Filesystem access.
pkgs/go/[email protected]/internal/cmd/pbdump/pbdump.go:121 
		b, err := os.ReadFile(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a50f536ac5709e7 — Filesystem access.
pkgs/go/[email protected]/internal/detrand/rand.go:46 
	f, err := os.Open(s)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d066e15d220dd79f — Filesystem access.
pkgs/go/[email protected]/internal/fuzztest/fuzztest.go:20 
	dir, err := os.Open(*corpus)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b8268b24ff1a83f — Filesystem access.
pkgs/go/[email protected]/internal/fuzztest/fuzztest.go:36 
			b, err := os.ReadFile(filepath.Join(*corpus, name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d6ac94609eeee86 — Environment-variable access.
pkgs/go/[email protected]/internal/impl/lazy.go:24 
	if os.Getenv("GOPROTODEBUG") == "nolazy" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5365dc69c807af7b — Environment-variable access.
pkgs/go/[email protected]/reflect/protoregistry/registry.go:51 
	if v := os.Getenv(env); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a591edd2b27639f0 — Environment-variable access.
pkgs/go/[email protected]/reflect/protoregistry/registry.go:63 
		panic("invalid " + env + " value: " + os.Getenv(env))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/prometheus/client_golang

go dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #a57078a85d32f205 — Filesystem access.
pkgs/go/[email protected]/prometheus/collectors/gen_go_collector_set.go:136 
	if err := os.WriteFile(fname, result, 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a2e3a57e1adf7d2 — Filesystem access.
pkgs/go/[email protected]/prometheus/gen_go_collector_metrics_set.go:102 
	if err := os.WriteFile(fname, result, 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75e4c59323aa498b — Filesystem access.
pkgs/go/[email protected]/prometheus/process_collector.go:169 
		content, err := os.ReadFile(pidFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #948b4b21efbf8de5 — Filesystem access.
pkgs/go/[email protected]/prometheus/process_collector_darwin.go:57 
	if dir, err := os.Open("/dev/fd"); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • @keyv/redis prod — dist-only: no readable source
  • @librechat/api prod — registry 404
  • keyv prod — dist-only: no readable source
  • @headlessui/react prod — dist-only: no readable source
  • @marsidev/react-turnstile prod — dist-only: no readable source
  • @mcp-ui/client prod — dist-only: no readable source
  • @react-spring/web prod — dist-only: no readable source
  • match-sorter prod — dist-only: no readable source
  • mermaid prod — dist-only: no readable source
  • react-hook-form prod — dist-only: no readable source
  • react-resizable-panels prod — dist-only: no readable source
  • react-router-dom prod — dist-only: no readable source
  • react-speech-recognition prod — dist-only: no readable source
  • react-textarea-autosize prod — dist-only: no readable source
  • react-virtualized prod — dist-only: no readable source
  • react-vtree prod — dist-only: no readable source
  • swr prod — dist-only: no readable source
  • tailwindcss-radix prod — dist-only: no readable source
  • @langchain/langgraph-checkpoint prod — dist-only: no readable source
  • @langchain/langgraph-checkpoint-mongodb prod — dist-only: no readable source