Close Open Privacy Scan
App Privacy Score
Low risk · 1344 finding(s)
Based on: 7 first-party package(s) · 3/4 deps analyzed
Dependency score: 82 (Low risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
aggregate.ee.engr.uky.eduapi.nuget.orgarxiv.orgbugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgccm.ucdenver.educdn.mathjax.orgcens.ioc.eecolab.sandbox.google.comcran.r-project.orgcrates.iodata-apis.orgdigitalassets.lib.berkeley.edudl.acm.orgdlmf.nist.govdmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.jax.devdocs.nvidia.comdocs.pytest.orgdocs.python.orgdocs.rsdocs.scipy.orgdoi.orgen.wikipedia.orgepubs.siam.orgfunctions.wolfram.comgcc.gnu.orggithub.comgitlab.freedesktop.orggraphics.stanford.edugroups.google.comicl.utk.eduimageio.readthedocs.ioipython.orgj3-fortran.orglibsdl.orgllvm.orgmathworld.wolfram.commatplotlib.orgmesonbuild.commetacpan.orgnicolas.limare.netnumpy.orgnumpydoc.readthedocs.ioopenxla.orgpackages.msys2.orgpandas.pydata.orgpeople.eecs.berkeley.edupeople.sc.fsu.edupersonal.math.ubc.caproceedings.mlr.presspyinstaller.readthedocs.iopypi.orgpytorch.orgraw.githubusercontent.comschemas.microsoft.comscikit-image.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgscipy.github.iosdm.lbl.govsource.cloud.google.comsourceware.orgstackoverflow.comtc39.estruststore.readthedocs.iotyping.python.orgui.perfetto.devviews.scientific-python.orgweb.archive.orgwiki.haskell.orgwixtoolset.orgwrapdb.mesonbuild.comwww.ams.orgwww.ecma-international.orgwww.google.comwww.intel.comwww.jmlr.orgwww.jstage.jst.go.jpwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.oasis-open.orgwww.openblas.netwww.openxla.orgwww.scipy.orgwww.stixfonts.orgwww.tensorflow.orgwww.thesalmons.orgwww.w3.orgwww.xyz.edu
</> First-Party Code
first-party (python)
python first-partyexpand_more 189 low-confidence finding(s)
low env_fs — Environment-variable access. 153 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations
low env_fs — Filesystem access. 32 locations
download = urllib.request.urlopen(url).read()Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
first-party (python): jax_plugins/cuda
python first-partyexpand_more 2 low-confidence finding(s)
low env_fs — Environment-variable access. 2 locations
first-party (python): jax_plugins/oneapi
python first-partyexpand_more 1 low-confidence finding(s)
runfiles_dir = os.getenv('RUNFILES_DIR', None)Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
first-party (python): jax_plugins/rocm
python first-partyexpand_more 4 low-confidence finding(s)
low env_fs — Environment-variable access. 4 locations
first-party (python): jaxlib
python first-partyexpand_more 27 low-confidence finding(s)
low env_fs — Filesystem access. 16 locations
low env_fs — Environment-variable access. 11 locations
</> Dependencies
jax
python dependencyexpand_more 139 low-confidence finding(s)
low env_fs — Environment-variable access. 109 locations
api_resp = requests.get(
f'{gce_metadata_endpoint}/computeMetadata/v1/instance/attributes/{key}',
headers={'Metadata-Flavor': 'Google'}, timeout=60)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs — Filesystem access. 29 locations
numpy
python dependencyexpand_more 982 low-confidence finding(s)
low env_fs — Filesystem access. 618 locations
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57
low env_fs — Environment-variable access. 356 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
Skipped dependencies
Production
- scipy prod — sdist exceeds byte cap