Close Open Privacy Scan

bolt Snapshot: commit b357a5a

science engine v1.23

schedule 2026-07-25T17:16:11.966029+00:00

smart_toy AI deps detected: @ai-sdk/anthropic, @ai-sdk/openai, @anthropic-ai/sdk, @langchain/core +11 more — detected in dependencies, not a safety judgment.

App Privacy Score

57 /100

Medium privacy risk

Medium risk · 1514 finding(s)

Based on: 18 first-party package(s) · 126/155 deps analyzed

Dependency score: 0 (High risk)

bar_chart Score Breakdown

telemetry −25

egress −15

env_fs −3

list Scan Summary

0 high 355 medium 1159 low

First-party packages: 4

Dependency packages: 27

Ecosystem: python

swap_horiz Application data flows

External domains: ::ffff:192.168.0.1abcsales.cloud.databricks.comai-sdk.devai.google.devaiplatform.googleapis.comaka.msalembic.sqlalchemy.organimations.devapi-docs.databricks.comapi-inference.huggingface.coapi.anthropic.comapi.cloudflare.comapi.cohere.comapi.deepseek.comapi.github.comapi.groq.comapi.jina.aiapi.langcache.comapi.mem0.aiapi.minimax.ioapi.morphllm.comapi.openai.comapi.pinecone.ioapi.sarvam.aiapi.together.aiapi.together.xyzapi.x.aiapp.mem0.aiapp.posthog.comarrow.apache.orgarticles-en-preview-xyz.pinecone.ioarticles-en-preview.svc.pinecone.ioarxiv.orgauth.openai.comautopush-generativelanguage.sandbox.googleapis.comavro.apache.orgaws-us-east-1.langcache.redis.ioaws.amazon.combce.baidu.combrotlipy.readthedocs.iobugs.python.orgcassandra.apache.orgchroma-onnx-models.s3.amazonaws.comcircumicons.comcloud.google.comcode.activestate.comcode.google.comcognitiveservices.azure.comcohere.aiconsole.groq.comconsole.mistral.aiconsole.pinecone.iocookbook.openai.comcreativecommons.orgcustom.api.mem0.aicvs.pgfoundry.orgcx-oracle.readthedocs.iodash.voyageai.comdashboard.cohere.comdatabase.windows.netdatastax-oss.atlassian.netdatatracker.ietf.orgdate-fns.orgdev.mysql.comdeveloper.mozilla.orgdevelopers.cloudflare.comdevelopers.google.comdiscord.ggdiscuss.python.orgdochub.mongodb.orgdocs.anthropic.comdocs.atlas.mongodb.comdocs.aws.amazon.comdocs.cloud.google.comdocs.cohere.comdocs.databricks.comdocs.datastax.comdocs.expo.devdocs.gcp.databricks.comdocs.mem0.aidocs.microsoft.comdocs.nomic.aidocs.oracle.comdocs.pinecone.iodocs.pydantic.devdocs.python-requests.orgdocs.python.orgdocs.rsdocs.together.aidocs.trychroma.comdocs.voyageai.comdocs.weaviate.iodownload.oracle.comdownload.pytorch.orgdummy.comeli.thegreenplace.netembed.trychroma.comen.wikipedia.orgerikflowers.github.ioerrors.pydantic.deveu.i.posthog.comeu.posthog.comexam_ple.comexample-resource.azure.openai.comfeathericons.comfontawesome.comfoo.comgame-icons.netgateway.ai.cloudflare.comgemini-api-demos.uc.r.appspot.comgenerativelanguage.googleapis.comgist.github.comgit-scm.comgithub.comgoogle-auth.readthedocs.iogoogle.aip.devgoogle.github.iogrpc.github.iohelp.openai.comhost.docker.internalhttpbin.orghuggingface.cohypothesis.readthedocs.ioicons.radix-ui.comicons8.comidp.mycompany.cominfer.roboflow.cominference.do-ai.runionicons.comissues.apache.orgjina.aijson-schema.orgkafka.apache.orgkb.databricks.comlearn.microsoft.comlegacy.python.orglinux.die.netlogin.chinacloudapi.cnlogin.microsoft.comlogin.microsoftonline.comlogin.microsoftonline.uslogin.pinecone.iolucene.apache.orglucide.devmagicstack.github.iomanagement.azure.commanagement.chinacloudapi.cnmanagement.core.chinacloudapi.cnmanagement.core.usgovcloudapi.netmanagement.core.windows.netmanagement.usgovcloudapi.netmaven.apache.orgmem0.aimodel-spec.openai.commodelcontextprotocol.iomongodb.commsdn.microsoft.commy-index.svc.pinecone.iomy-keyvault-name.vault.azure.netmy-workspace.cloud.databricks.commypy.readthedocs.iomüller.denats.ionews.google.comnpm.imnpms.ionumpy.orgocticons.github.comollama.comonnxruntime.aiontheline.trincoll.eduopenai.comopenrouter.aiopensource.orgopentelemetry.iooracle.github.iooss.redis.comoss.valkey.comossrdbms-aad.database.windows.netother.compackaging.python.orgpeps.python.orgpiblpmmdsiknacjnm1ltla.c1.europe-west3.gcp.weaviate.cloudpip.pypa.ioplatform.claude.complatform.openai.composthog.comprod-1-data.ke.pinecone.ioprotobuf.devpydantic-docs.helpmanual.iopymysql.readthedocs.iopypi.orgpypi.python.orgpypika.readthedocs.iopython-devtools.helpmanual.iopython-oracledb.readthedocs.iopythonhosted.orgraw.githubusercontent.comreact.devreactjs.orgredis.azure.comredis.comredis.ioredis.readthedocs.ioredisearch.ioredux-toolkit.js.orgredux.js.orgregistry.terraform.iorich.readthedocs.ios-ings.coms3-us-west-2.amazonaws.comsass-lang.comscripts.sil.orgsearch.azure.comsimpleicons.orgsome-cohere-baseurl.aisome-url.comsonner.emilkowal.skisourceforge.netspark.apache.orgsqlalche.mesqlite.orgsrc.dev.databricks.comstackoverflow.comstatus.databricks.comstorage-proxy.databricks.comstorage.googleapis.comtartarus.orgtechnet.microsoft.comtechspot.zzzeek.orgthesabbir.github.iotimeapi.iotoken.actions.githubusercontent.comtools.ietf.orgtwistedmatrix.comtwitter.comus.i.posthog.comus.posthog.comvalkey-py-cluster.readthedocs.iovalkey-py.readthedocs.iovalkey.comvalkey.iovorillaz.github.ioweaviate.iowebsockets.readthedocs.iowebwareforpython.github.iowiki.centos.orgwww.allrecipes.comwww.apache.orgwww.databricks.comwww.datastax.comwww.example.珠宝www.foodnetwork.comwww.framer.comwww.freetds.orgwww.gevent.orgwww.github.comwww.googleapis.comwww.iana.orgwww.ietf.orgwww.microsoft.comwww.mlflow.orgwww.mongodb.comwww.oracle.comwww.pcre.orgwww.postgresql.orgwww.psycopg.orgwww.pygresql.orgwww.python-httpx.orgwww.python.orgwww.quartz-scheduler.orgwww.rfc-editor.orgwww.sqlite.orgwww.w3.orgwww.w3schools.comwww.weaviate.iowww.xudongz.comwww.zetetic.netxn--fiqs8s.icom.museumyour-app.com

medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

1sourcerepo/mem0/client/main.py:116
2sinkrepo/mem0/client/main.py:141

1sourcerepo/mem0/client/main.py:1005
2sinkrepo/mem0/client/main.py:1030

1sourcerepo/mem0/client/main.py:1057
2sinkrepo/mem0/client/main.py:1056

1sourcerepo/mem0/llms/sarvam.py:47
2sinkrepo/mem0/llms/sarvam.py:81

medium first-party (python): cli/python A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

1sourcerepo/cli/python/src/mem0_cli/backend/platform.py:28
2sinkrepo/cli/python/src/mem0_cli/backend/platform.py:27

hub Dependency data flows (106)

medium azure-identity dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/azure/identity/_credentials/environment.py:66
2sinkpkgs/python/[email protected]/azure/identity/_credentials/environment.py:99

medium azure-identity dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:60
2sinkpkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:77

medium databricks-sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

1sourcepkgs/python/[email protected]/databricks/sdk/credentials_provider.py:340
2sinkpkgs/python/[email protected]/databricks/sdk/credentials_provider.py:343

1sourcepkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:21
2sinkpkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:23

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_agentic_retrieval.py:45
2sinkpkgs/python/[email protected]/samples/sample_agentic_retrieval.py:70

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_agentic_retrieval.py:45
2sinkpkgs/python/[email protected]/samples/sample_agentic_retrieval.py:127

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:46
2sinkpkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:73

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:46
2sinkpkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:134

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_authentication.py:32
2sinkpkgs/python/[email protected]/samples/sample_authentication.py:39

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_authentication.py:48
2sinkpkgs/python/[email protected]/samples/sample_authentication.py:55

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_authentication_async.py:33
2sinkpkgs/python/[email protected]/samples/sample_authentication_async.py:41

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_authentication_async.py:50
2sinkpkgs/python/[email protected]/samples/sample_authentication_async.py:58

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_documents_crud.py:26
2sinkpkgs/python/[email protected]/samples/sample_documents_crud.py:59

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_documents_crud.py:26
2sinkpkgs/python/[email protected]/samples/sample_documents_crud.py:72

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_documents_crud.py:26
2sinkpkgs/python/[email protected]/samples/sample_documents_crud.py:87

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_documents_crud.py:26
2sinkpkgs/python/[email protected]/samples/sample_documents_crud.py:100

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_documents_crud.py:26
2sinkpkgs/python/[email protected]/samples/sample_documents_crud.py:115

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_documents_crud_async.py:27
2sinkpkgs/python/[email protected]/samples/sample_documents_crud_async.py:61

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_documents_crud_async.py:27
2sinkpkgs/python/[email protected]/samples/sample_documents_crud_async.py:77

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_documents_crud_async.py:27
2sinkpkgs/python/[email protected]/samples/sample_documents_crud_async.py:93

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_documents_crud_async.py:27
2sinkpkgs/python/[email protected]/samples/sample_documents_crud_async.py:107

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_documents_crud_async.py:27
2sinkpkgs/python/[email protected]/samples/sample_documents_crud_async.py:123

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_alias_crud.py:27
2sinkpkgs/python/[email protected]/samples/sample_index_alias_crud.py:42

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_alias_crud.py:27
2sinkpkgs/python/[email protected]/samples/sample_index_alias_crud.py:54

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_alias_crud.py:27
2sinkpkgs/python/[email protected]/samples/sample_index_alias_crud.py:108

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28
2sinkpkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:44

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28
2sinkpkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:57

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28
2sinkpkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:112

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_analyze_text.py:26
2sinkpkgs/python/[email protected]/samples/sample_index_analyze_text.py:43

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:27
2sinkpkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:45

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_client_custom_request.py:33
2sinkpkgs/python/[email protected]/samples/sample_index_client_custom_request.py:46

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:37
2sinkpkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:51

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_crud.py:26
2sinkpkgs/python/[email protected]/samples/sample_index_crud.py:69

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_crud.py:26
2sinkpkgs/python/[email protected]/samples/sample_index_crud.py:80

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_crud.py:26
2sinkpkgs/python/[email protected]/samples/sample_index_crud.py:126

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_crud.py:26
2sinkpkgs/python/[email protected]/samples/sample_index_crud.py:139

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_crud_async.py:27
2sinkpkgs/python/[email protected]/samples/sample_index_crud_async.py:72

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_crud_async.py:27
2sinkpkgs/python/[email protected]/samples/sample_index_crud_async.py:84

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_crud_async.py:27
2sinkpkgs/python/[email protected]/samples/sample_index_crud_async.py:132

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23
2sinkpkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:43

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23
2sinkpkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:59

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23
2sinkpkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:71

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23
2sinkpkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:85

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24
2sinkpkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:45

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24
2sinkpkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:62

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24
2sinkpkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:75

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24
2sinkpkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:90

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_crud.py:25
2sinkpkgs/python/[email protected]/samples/sample_indexer_crud.py:74

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_crud.py:25
2sinkpkgs/python/[email protected]/samples/sample_indexer_crud.py:87

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_crud.py:25
2sinkpkgs/python/[email protected]/samples/sample_indexer_crud.py:99

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_crud.py:25
2sinkpkgs/python/[email protected]/samples/sample_indexer_crud.py:112

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26
2sinkpkgs/python/[email protected]/samples/sample_indexer_crud_async.py:80

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26
2sinkpkgs/python/[email protected]/samples/sample_indexer_crud_async.py:94

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26
2sinkpkgs/python/[email protected]/samples/sample_indexer_crud_async.py:107

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26
2sinkpkgs/python/[email protected]/samples/sample_indexer_crud_async.py:121

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25
2sinkpkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:51

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25
2sinkpkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:64

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25
2sinkpkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:76

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26
2sinkpkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:52

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26
2sinkpkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:66

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26
2sinkpkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:79

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_workflow.py:25
2sinkpkgs/python/[email protected]/samples/sample_indexer_workflow.py:119

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_workflow.py:25
2sinkpkgs/python/[email protected]/samples/sample_indexer_workflow.py:130

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_indexer_workflow.py:25
2sinkpkgs/python/[email protected]/samples/sample_indexer_workflow.py:134

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_autocomplete.py:26
2sinkpkgs/python/[email protected]/samples/sample_query_autocomplete.py:40

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:28
2sinkpkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:43

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_facets.py:26
2sinkpkgs/python/[email protected]/samples/sample_query_facets.py:43

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_facets_async.py:28
2sinkpkgs/python/[email protected]/samples/sample_query_facets_async.py:46

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_filter.py:26
2sinkpkgs/python/[email protected]/samples/sample_query_filter.py:45

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_filter_async.py:28
2sinkpkgs/python/[email protected]/samples/sample_query_filter_async.py:48

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_semantic.py:24
2sinkpkgs/python/[email protected]/samples/sample_query_semantic.py:66

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_semantic.py:24
2sinkpkgs/python/[email protected]/samples/sample_query_semantic.py:67

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_semantic.py:24
2sinkpkgs/python/[email protected]/samples/sample_query_semantic.py:89

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_semantic.py:24
2sinkpkgs/python/[email protected]/samples/sample_query_semantic.py:90

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_semantic_async.py:25
2sinkpkgs/python/[email protected]/samples/sample_query_semantic_async.py:69

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_semantic_async.py:25
2sinkpkgs/python/[email protected]/samples/sample_query_semantic_async.py:70

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_semantic_async.py:25
2sinkpkgs/python/[email protected]/samples/sample_query_semantic_async.py:91

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_semantic_async.py:25
2sinkpkgs/python/[email protected]/samples/sample_query_semantic_async.py:92

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_session.py:24
2sinkpkgs/python/[email protected]/samples/sample_query_session.py:38

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_session_async.py:25
2sinkpkgs/python/[email protected]/samples/sample_query_session_async.py:40

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_simple.py:24
2sinkpkgs/python/[email protected]/samples/sample_query_simple.py:38

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_simple_async.py:26
2sinkpkgs/python/[email protected]/samples/sample_query_simple_async.py:41

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_suggestions.py:24
2sinkpkgs/python/[email protected]/samples/sample_query_suggestions.py:39

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_suggestions_async.py:26
2sinkpkgs/python/[email protected]/samples/sample_query_suggestions_async.py:42

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector.py:50
2sinkpkgs/python/[email protected]/samples/sample_query_vector.py:130

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector.py:50
2sinkpkgs/python/[email protected]/samples/sample_query_vector.py:148

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector.py:50
2sinkpkgs/python/[email protected]/samples/sample_query_vector.py:170

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector.py:50
2sinkpkgs/python/[email protected]/samples/sample_query_vector.py:196

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector.py:50
2sinkpkgs/python/[email protected]/samples/sample_query_vector.py:221

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector.py:50
2sinkpkgs/python/[email protected]/samples/sample_query_vector.py:222

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector.py:50
2sinkpkgs/python/[email protected]/samples/sample_query_vector.py:223

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector.py:50
2sinkpkgs/python/[email protected]/samples/sample_query_vector.py:224

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector.py:50
2sinkpkgs/python/[email protected]/samples/sample_query_vector.py:225

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector.py:50
2sinkpkgs/python/[email protected]/samples/sample_query_vector.py:226

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector_async.py:52
2sinkpkgs/python/[email protected]/samples/sample_query_vector_async.py:134

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector_async.py:52
2sinkpkgs/python/[email protected]/samples/sample_query_vector_async.py:153

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector_async.py:52
2sinkpkgs/python/[email protected]/samples/sample_query_vector_async.py:176

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector_async.py:52
2sinkpkgs/python/[email protected]/samples/sample_query_vector_async.py:204

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector_async.py:52
2sinkpkgs/python/[email protected]/samples/sample_query_vector_async.py:230

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector_async.py:52
2sinkpkgs/python/[email protected]/samples/sample_query_vector_async.py:231

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector_async.py:52
2sinkpkgs/python/[email protected]/samples/sample_query_vector_async.py:232

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector_async.py:52
2sinkpkgs/python/[email protected]/samples/sample_query_vector_async.py:233

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector_async.py:52
2sinkpkgs/python/[email protected]/samples/sample_query_vector_async.py:234

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_query_vector_async.py:52
2sinkpkgs/python/[email protected]/samples/sample_query_vector_async.py:235

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_search_client_custom_request.py:25
2sinkpkgs/python/[email protected]/samples/sample_search_client_custom_request.py:42

medium azure-search-documents dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

1sourcepkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:26
2sinkpkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:48

</> First-Party Code

first-party (python)

python first-party

medium pii_flow production #731d35f13af4a90b — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/mem0/client/main.py:141 · flow /tmp/closeopen-axxfv8ed/repo/mem0/client/main.py:116 → /tmp/closeopen-axxfv8ed/repo/mem0/client/main.py:141

                headers={
                    "Authorization": f"Token {self.api_key}",
                    "Mem0-User-ID": self.user_id,
                },

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium pii_flow production #79be34299418f688 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/mem0/client/main.py:1030 · flow /tmp/closeopen-axxfv8ed/repo/mem0/client/main.py:1005 → /tmp/closeopen-axxfv8ed/repo/mem0/client/main.py:1030

                headers={
                    "Authorization": f"Token {self.api_key}",
                    "Mem0-User-ID": self.user_id,
                },

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium pii_flow production #8c6148456c6829ec — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/mem0/client/main.py:1056 · flow /tmp/closeopen-axxfv8ed/repo/mem0/client/main.py:1057 → /tmp/closeopen-axxfv8ed/repo/mem0/client/main.py:1056

                headers={
                    "Authorization": f"Token {self.api_key}",
                    "Mem0-User-ID": self.user_id,
                },

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium pii_flow production #34b308713f725679 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/mem0/llms/sarvam.py:81 · flow /tmp/closeopen-axxfv8ed/repo/mem0/llms/sarvam.py:47 → /tmp/closeopen-axxfv8ed/repo/mem0/llms/sarvam.py:81

            response = requests.post(url, headers=headers, json=params, timeout=30)

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium telemetry production #f8a93e4149196595 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/server/telemetry.py:66

        from posthog import Posthog

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 278 low-confidence finding(s)

low env_fs — Environment-variable access. 178 locations

repo/examples/misc/movie_recommendation_grok3.py:41

repo/examples/misc/strands_agent_aws_elasticache_neptune.py:71

repo/examples/misc/strands_agent_aws_elasticache_neptune.py:82

repo/integrations/mem0-plugin/scripts/_identity.py:56

repo/integrations/mem0-plugin/scripts/_identity.py:59

repo/integrations/mem0-plugin/scripts/_identity.py:62

repo/integrations/mem0-plugin/scripts/_identity.py:72

repo/integrations/mem0-plugin/scripts/_identity.py:75

repo/integrations/mem0-plugin/scripts/_project.py:26

repo/integrations/mem0-plugin/scripts/_search.py:29

repo/integrations/mem0-plugin/scripts/auto_capture.py:32

repo/integrations/mem0-plugin/scripts/auto_capture.py:173

repo/integrations/mem0-plugin/scripts/auto_import.py:34

repo/integrations/mem0-plugin/scripts/auto_import.py:264

repo/integrations/mem0-plugin/scripts/auto_setup_categories.py:50

repo/integrations/mem0-plugin/scripts/auto_setup_categories.py:200

repo/integrations/mem0-plugin/scripts/capture_compact_summary.py:37

repo/integrations/mem0-plugin/scripts/capture_session_summary.py:35

repo/integrations/mem0-plugin/scripts/file_context.py:87

repo/integrations/mem0-plugin/scripts/on_pre_compact.py:35

repo/integrations/mem0-plugin/scripts/on_pre_compact.py:277

repo/integrations/mem0-plugin/scripts/session_stats.py:21

repo/integrations/mem0-plugin/scripts/session_timeline.py:32

repo/integrations/mem0-plugin/scripts/session_timeline.py:90

repo/integrations/mem0-plugin/scripts/setup_coding_categories.py:29

repo/integrations/mem0-plugin/scripts/setup_coding_categories.py:30

repo/integrations/mem0-plugin/scripts/setup_coding_categories.py:182

repo/integrations/mem0-plugin/scripts/telemetry.py:64

repo/integrations/mem0-plugin/scripts/telemetry.py:67

repo/integrations/mem0-plugin/scripts/telemetry.py:72

repo/integrations/mem0-plugin/scripts/telemetry.py:75

repo/integrations/mem0-plugin/scripts/telemetry.py:77

repo/integrations/mem0-plugin/scripts/telemetry.py:79

repo/integrations/mem0-plugin/scripts/telemetry.py:81

repo/integrations/mem0-plugin/scripts/telemetry.py:83

repo/integrations/mem0-plugin/scripts/telemetry.py:89

repo/integrations/mem0-plugin/scripts/telemetry.py:93

repo/mem0/client/main.py:116

repo/mem0/client/main.py:1005

repo/mem0/configs/base.py:13

repo/mem0/configs/embeddings/base.py:111

repo/mem0/configs/llms/aws_bedrock.py:58

repo/mem0/configs/llms/aws_bedrock.py:101

repo/mem0/configs/llms/aws_bedrock.py:104

repo/mem0/configs/llms/aws_bedrock.py:107

repo/mem0/configs/llms/aws_bedrock.py:110

repo/mem0/configs/llms/gemini.py:61

repo/mem0/configs/llms/gemini.py:63

repo/mem0/configs/llms/gemini.py:64

repo/mem0/configs/vector_stores/pinecone.py:27

repo/mem0/configs/vector_stores/turbopuffer.py:26

repo/mem0/configs/vector_stores/upstash_vector.py:27

repo/mem0/configs/vector_stores/upstash_vector.py:28

repo/mem0/embeddings/aws_bedrock.py:28

repo/mem0/embeddings/aws_bedrock.py:29

repo/mem0/embeddings/aws_bedrock.py:30

repo/mem0/embeddings/azure_openai.py:17

repo/mem0/embeddings/azure_openai.py:18

repo/mem0/embeddings/azure_openai.py:19

repo/mem0/embeddings/azure_openai.py:20

repo/mem0/embeddings/gemini.py:18

repo/mem0/embeddings/openai.py:21

repo/mem0/embeddings/openai.py:24

repo/mem0/embeddings/openai.py:25

repo/mem0/embeddings/openai.py:28

repo/mem0/embeddings/together.py:15

repo/mem0/embeddings/vertexai.py:36

repo/mem0/embeddings/vertexai.py:37

repo/mem0/llms/anthropic.py:40

repo/mem0/llms/anthropic.py:41

repo/mem0/llms/azure_openai.py:46

repo/mem0/llms/azure_openai.py:47

repo/mem0/llms/azure_openai.py:48

repo/mem0/llms/azure_openai.py:49

repo/mem0/llms/azure_openai_structured.py:24

repo/mem0/llms/azure_openai_structured.py:25

repo/mem0/llms/azure_openai_structured.py:26

repo/mem0/llms/azure_openai_structured.py:27

repo/mem0/llms/deepseek.py:39

repo/mem0/llms/deepseek.py:40

repo/mem0/llms/gemini.py:42

repo/mem0/llms/groq.py:25

repo/mem0/llms/minimax.py:39

repo/mem0/llms/minimax.py:42

repo/mem0/llms/openai.py:42

repo/mem0/llms/openai.py:44

repo/mem0/llms/openai.py:46

repo/mem0/llms/openai.py:50

repo/mem0/llms/openai.py:51

repo/mem0/llms/openai.py:113

repo/mem0/llms/openai_structured.py:17

repo/mem0/llms/openai_structured.py:18

repo/mem0/llms/sarvam.py:19

repo/mem0/llms/sarvam.py:28

repo/mem0/llms/together.py:22

repo/mem0/llms/vllm.py:39

repo/mem0/llms/vllm.py:40

repo/mem0/llms/xai.py:39

repo/mem0/llms/xai.py:40

repo/mem0/reranker/cohere_reranker.py:30

repo/mem0/reranker/zero_entropy_reranker.py:30

repo/mem0/utils/gcp_auth.py:65

repo/mem0/utils/gcp_auth.py:66

repo/mem0/utils/gcp_auth.py:126

repo/mem0/vector_stores/pinecone.py:61

repo/mem0/vector_stores/turbopuffer.py:49

repo/openmemory/api/alembic/env.py:49

repo/openmemory/api/alembic/env.py:69

repo/openmemory/api/app/config.py:3

repo/openmemory/api/app/database.py:10

repo/openmemory/api/app/utils/memory.py:56

repo/openmemory/api/app/utils/memory.py:236

repo/openmemory/api/app/utils/memory.py:239

repo/openmemory/api/app/utils/memory.py:240

repo/openmemory/api/app/utils/memory.py:242

repo/openmemory/api/app/utils/memory.py:245

repo/openmemory/api/app/utils/memory.py:246

repo/openmemory/api/app/utils/memory.py:248

repo/openmemory/api/app/utils/memory.py:251

repo/openmemory/api/app/utils/memory.py:253

repo/openmemory/api/app/utils/memory.py:254

repo/openmemory/api/app/utils/memory.py:260

repo/openmemory/api/app/utils/memory.py:264

repo/openmemory/api/app/utils/memory.py:266

repo/openmemory/api/app/utils/memory.py:269

repo/openmemory/api/app/utils/memory.py:270

repo/openmemory/api/app/utils/memory.py:271

repo/openmemory/api/app/utils/memory.py:272

repo/openmemory/api/app/utils/memory.py:273

repo/openmemory/api/app/utils/memory.py:275

repo/openmemory/api/app/utils/memory.py:278

repo/openmemory/api/app/utils/memory.py:279

repo/openmemory/api/app/utils/memory.py:285

repo/openmemory/api/app/utils/memory.py:286

repo/openmemory/api/app/utils/memory.py:290

repo/openmemory/api/app/utils/memory.py:293

repo/openmemory/api/app/utils/memory.py:294

repo/openmemory/api/app/utils/memory.py:301

repo/openmemory/api/app/utils/memory.py:302

repo/openmemory/api/app/utils/memory.py:307

repo/openmemory/api/app/utils/memory.py:310

repo/openmemory/api/app/utils/memory.py:311

repo/openmemory/api/app/utils/memory.py:313

repo/openmemory/api/app/utils/memory.py:317

repo/openmemory/api/app/utils/memory.py:331

repo/openmemory/api/app/utils/memory.py:332

repo/openmemory/api/app/utils/memory.py:333

repo/openmemory/api/app/utils/memory.py:334

repo/openmemory/api/app/utils/memory.py:335

repo/openmemory/api/app/utils/memory.py:347

repo/openmemory/api/app/utils/memory.py:348

repo/openmemory/api/app/utils/memory.py:349

repo/openmemory/api/app/utils/memory.py:350

repo/openmemory/api/app/utils/memory.py:389

repo/server/auth.py:15

repo/server/auth.py:19

repo/server/auth.py:20

repo/server/db.py:8

repo/server/db.py:9

repo/server/db.py:10

repo/server/db.py:11

repo/server/db.py:12

repo/server/main.py:107

repo/server/main.py:108

repo/server/main.py:109

repo/server/main.py:110

repo/server/main.py:111

repo/server/main.py:112

repo/server/main.py:114

repo/server/main.py:115

repo/server/main.py:116

repo/server/main.py:117

repo/server/main.py:159

repo/server/scripts/prune_request_logs.py:17

repo/server/scripts/reset_admin_password.py:16

repo/server/scripts/reset_admin_password.py:17

repo/server/telemetry.py:27

repo/server/telemetry.py:28

low env_fs — Filesystem access. 49 locations

repo/examples/misc/personal_assistant_agno.py:34

repo/examples/misc/voice_assistant_elevenlabs.py:149

repo/integrations/mem0-plugin/scripts/_identity.py:41

repo/integrations/mem0-plugin/scripts/_project.py:34

repo/integrations/mem0-plugin/scripts/_project.py:47

repo/integrations/mem0-plugin/scripts/_project.py:101

repo/integrations/mem0-plugin/scripts/_project.py:110

repo/integrations/mem0-plugin/scripts/auto_capture.py:50

repo/integrations/mem0-plugin/scripts/auto_capture.py:176

repo/integrations/mem0-plugin/scripts/auto_import.py:96

repo/integrations/mem0-plugin/scripts/auto_import.py:107

repo/integrations/mem0-plugin/scripts/auto_import.py:118

repo/integrations/mem0-plugin/scripts/auto_import.py:331

repo/integrations/mem0-plugin/scripts/auto_setup_categories.py:96

repo/integrations/mem0-plugin/scripts/auto_setup_categories.py:113

repo/integrations/mem0-plugin/scripts/capture_compact_summary.py:56

repo/integrations/mem0-plugin/scripts/capture_compact_summary.py:189

repo/integrations/mem0-plugin/scripts/capture_session_summary.py:60

repo/integrations/mem0-plugin/scripts/import_competing_tools.py:44

repo/integrations/mem0-plugin/scripts/import_competing_tools.py:53

repo/integrations/mem0-plugin/scripts/import_competing_tools.py:161

repo/integrations/mem0-plugin/scripts/import_competing_tools.py:191

repo/integrations/mem0-plugin/scripts/import_competing_tools.py:230

repo/integrations/mem0-plugin/scripts/import_competing_tools.py:258

repo/integrations/mem0-plugin/scripts/install_codex_hooks.py:47

repo/integrations/mem0-plugin/scripts/install_codex_hooks.py:56

repo/integrations/mem0-plugin/scripts/install_codex_hooks.py:88

repo/integrations/mem0-plugin/scripts/install_codex_hooks.py:94

repo/integrations/mem0-plugin/scripts/load_settings.py:28

repo/integrations/mem0-plugin/scripts/load_settings.py:39

repo/integrations/mem0-plugin/scripts/on_pre_compact.py:59

repo/integrations/mem0-plugin/scripts/on_pre_compact.py:279

repo/integrations/mem0-plugin/scripts/parse_export_file.py:137

repo/integrations/mem0-plugin/scripts/parse_mem0_config.py:172

repo/integrations/mem0-plugin/scripts/parse_mem0_config.py:223

repo/integrations/mem0-plugin/scripts/session_stats.py:27

repo/integrations/mem0-plugin/scripts/session_stats.py:41

repo/integrations/mem0-plugin/scripts/telemetry.py:45

repo/mem0/utils/gcp_auth.py:60

repo/mem0/utils/gcp_auth.py:72

repo/mem0/vector_stores/faiss.py:76

repo/mem0/vector_stores/faiss.py:194

repo/mem0/vector_stores/faiss.py:245

repo/openmemory/api/app/utils/memory.py:81

repo/scripts/check-llms-txt-coverage.py:45

repo/scripts/check-llms-txt-coverage.py:108

repo/scripts/check-llms-txt-coverage.py:134

repo/server/telemetry.py:39

repo/server/telemetry.py:47

low egress — Hardcoded external endpoint. Review what data is sent to this destination. 10 locations

repo/integrations/mem0-plugin/scripts/_search.py:37

repo/integrations/mem0-plugin/scripts/auto_capture.py:131

repo/integrations/mem0-plugin/scripts/auto_import.py:137

repo/integrations/mem0-plugin/scripts/auto_import.py:171

repo/integrations/mem0-plugin/scripts/auto_import.py:236

repo/integrations/mem0-plugin/scripts/capture_compact_summary.py:120

repo/integrations/mem0-plugin/scripts/capture_session_summary.py:193

repo/integrations/mem0-plugin/scripts/import_competing_tools.py:85

repo/integrations/mem0-plugin/scripts/on_pre_compact.py:183

repo/integrations/mem0-plugin/scripts/telemetry.py:116

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 41 locations

repo/integrations/mem0-plugin/scripts/_search.py:43

repo/integrations/mem0-plugin/scripts/auto_capture.py:141

repo/integrations/mem0-plugin/scripts/auto_import.py:144

repo/integrations/mem0-plugin/scripts/auto_import.py:179

repo/integrations/mem0-plugin/scripts/auto_import.py:203

repo/integrations/mem0-plugin/scripts/auto_import.py:247

repo/integrations/mem0-plugin/scripts/capture_compact_summary.py:130

repo/integrations/mem0-plugin/scripts/capture_session_summary.py:203

repo/integrations/mem0-plugin/scripts/import_competing_tools.py:95

repo/integrations/mem0-plugin/scripts/on_pre_compact.py:194

repo/integrations/mem0-plugin/scripts/session_timeline.py:50

repo/integrations/mem0-plugin/scripts/telemetry.py:122

repo/integrations/mem0-plugin/skills/mem0/scripts/mem0_doc_search.py:83

repo/mem0/client/main.py:243

repo/mem0/client/main.py:381

repo/mem0/client/main.py:466

repo/mem0/client/main.py:716

repo/mem0/client/main.py:824

repo/mem0/client/main.py:852

repo/mem0/client/main.py:886

repo/mem0/client/main.py:1054

repo/mem0/client/main.py:1163

repo/mem0/client/main.py:1301

repo/mem0/client/main.py:1383

repo/mem0/client/main.py:1622

repo/mem0/client/main.py:1726

repo/mem0/client/main.py:1754

repo/mem0/client/main.py:1788

repo/mem0/client/project.py:342

repo/mem0/client/project.py:380

repo/mem0/client/project.py:494

repo/mem0/client/project.py:529

repo/mem0/client/project.py:565

repo/mem0/client/project.py:655

repo/mem0/client/project.py:693

repo/mem0/client/project.py:807

repo/mem0/client/project.py:842

repo/mem0/client/project.py:878

repo/mem0/llms/sarvam.py:81

repo/server/server_state.py:28

repo/skills/mem0/scripts/mem0_doc_search.py:79

first-party (python): cli/python

python first-party

medium pii_flow production #f4560fc4f75fd6bd — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/cli/python/src/mem0_cli/backend/platform.py:27 · flow /tmp/closeopen-axxfv8ed/repo/cli/python/src/mem0_cli/backend/platform.py:28 → /tmp/closeopen-axxfv8ed/repo/cli/python/src/mem0_cli/backend/platform.py:27

            headers={
                "Authorization": f"Token {config.api_key}",
                "Content-Type": "application/json",
                "X-Mem0-Source": "cli",
                "X-Mem0-Client-Language": "python",
                "X-Mem0-Client-Version": __version__,
            },

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium telemetry production #1612f9db84041e96 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/cli/python/src/mem0_cli/commands/utils.py:130

    for item in track(
        data, description=f"[{DIM_COLOR}]Importing memories...[/]", console=err_console
    ):

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 32 low-confidence finding(s)

low env_fs — Environment-variable access. 15 locations

repo/cli/python/src/mem0_cli/agent_detect.py:34

repo/cli/python/src/mem0_cli/branding.py:39

repo/cli/python/src/mem0_cli/commands/init_cmd.py:244

repo/cli/python/src/mem0_cli/commands/init_cmd.py:319

repo/cli/python/src/mem0_cli/commands/init_cmd.py:388

repo/cli/python/src/mem0_cli/commands/init_cmd.py:415

repo/cli/python/src/mem0_cli/commands/init_cmd.py:463

repo/cli/python/src/mem0_cli/commands/init_cmd.py:528

repo/cli/python/src/mem0_cli/config.py:120

repo/cli/python/src/mem0_cli/config.py:124

repo/cli/python/src/mem0_cli/config.py:128

repo/cli/python/src/mem0_cli/config.py:132

repo/cli/python/src/mem0_cli/config.py:136

repo/cli/python/src/mem0_cli/config.py:140

repo/cli/python/src/mem0_cli/telemetry.py:27

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 10 locations

repo/cli/python/src/mem0_cli/backend/platform.py:41

repo/cli/python/src/mem0_cli/commands/agent_mode_cmd.py:80

repo/cli/python/src/mem0_cli/commands/agent_mode_cmd.py:167

repo/cli/python/src/mem0_cli/commands/agent_mode_cmd.py:200

repo/cli/python/src/mem0_cli/commands/agent_rush_cmd.py:56

repo/cli/python/src/mem0_cli/commands/init_cmd.py:115

repo/cli/python/src/mem0_cli/commands/init_cmd.py:145

repo/cli/python/src/mem0_cli/commands/init_cmd.py:178

repo/cli/python/src/mem0_cli/telemetry_sender.py:77

repo/cli/python/src/mem0_cli/telemetry_sender.py:110

low env_fs — Filesystem access. 7 locations

repo/cli/python/src/mem0_cli/commands/memory.py:79

repo/cli/python/src/mem0_cli/commands/utils.py:119

repo/cli/python/src/mem0_cli/config.py:93

repo/cli/python/src/mem0_cli/config.py:177

repo/cli/python/src/mem0_cli/plugin_sync.py:92

repo/cli/python/src/mem0_cli/telemetry_sender.py:92

repo/cli/python/src/mem0_cli/telemetry_sender.py:95

first-party (python): mem0/memory

python first-party

medium telemetry production #1dc4cceeea674c91 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/mem0/memory/telemetry.py:9

from posthog import Posthog

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 4 low-confidence finding(s)

low env_fs — Environment-variable access. 3 locations

repo/mem0/memory/setup.py:11

repo/mem0/memory/telemetry.py:14

repo/mem0/memory/telemetry.py:48

low env_fs production #a3b20b64be6a075c capability detected · no path traced — Filesystem access.

repo/mem0/memory/setup.py:27

        with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): integrations/openclaw

python first-party

expand_more 4 low-confidence finding(s)

low env_fs — Environment-variable access. 2 locations

repo/integrations/openclaw/scripts/configure.py:11

repo/integrations/openclaw/scripts/configure.py:12

low env_fs — Filesystem access. 2 locations

repo/integrations/openclaw/scripts/configure.py:31

repo/integrations/openclaw/scripts/configure.py:63

</> Dependencies

posthog

python dependency

medium telemetry dependency Excluded from app score #25aa927cf3c7dc75 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:6

from posthog.args import (
    ID_TYPES as ID_TYPES,
    ExceptionArg,
    OptionalCaptureArgs,
    OptionalSetArgs,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5e9b6a08e89d1ef2 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:12

from posthog.capture_compression import CaptureCompression as CaptureCompression

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c682938d88896598 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:13

from posthog.capture_mode import CaptureMode as CaptureMode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #01df699deb4556d5 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:14

from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fcd5d5532b49a8b7 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:15

from posthog.exception_capture import ExceptionCapture

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e60fe64509e676b2 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:16

from posthog.contexts import (
    identify_context as inner_identify_context,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0b1bb8bcf39e4571 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:19

from posthog.contexts import (
    new_context as inner_new_context,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f26ea5a2f96bf1bd capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:22

from posthog.contexts import (
    scoped as inner_scoped,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f9809aaaf1db5fb2 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:25

from posthog.contexts import (
    set_capture_exception_code_variables_context as inner_set_capture_exception_code_variables_context,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #443b6d6dfa2cdcba capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:28

from posthog.contexts import (
    set_code_variables_ignore_patterns_context as inner_set_code_variables_ignore_patterns_context,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6b43140ef701997e capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:31

from posthog.contexts import (
    set_code_variables_mask_patterns_context as inner_set_code_variables_mask_patterns_context,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #83a0f78dfa084c5a capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:34

from posthog.contexts import (
    set_code_variables_mask_url_credentials_context as inner_set_code_variables_mask_url_credentials_context,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #eeba051dd7df9c6e capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:37

from posthog.contexts import (
    set_code_variables_detect_secrets_context as inner_set_code_variables_detect_secrets_context,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fb6c8f841c5731f2 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:40

from posthog.contexts import (
    set_context_device_id as inner_set_context_device_id,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #80b2d1adffd44012 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:43

from posthog.contexts import (
    set_context_session as inner_set_context_session,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #18ea4864c2a0d17a capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:46

from posthog.contexts import (
    tag as inner_tag,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7752474cd6ab8c9e capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:49

from posthog.contexts import (
    get_tags as inner_get_tags,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #eb30dcdd2afb4fef capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:52

from posthog.exception_utils import (
    DEFAULT_CODE_VARIABLES_DETECT_SECRETS,
    DEFAULT_CODE_VARIABLES_IGNORE_PATTERNS,
    DEFAULT_CODE_VARIABLES_MASK_PATTERNS,
    DEFAULT_CODE_VARIABLES_MASK_URL_CREDENTIALS,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d7cf921909512df9 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:58

from posthog.feature_flag_evaluations import (
    FeatureFlagEvaluations as FeatureFlagEvaluations,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bdfc75a91211d646 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:61

from posthog.feature_flags import (
    InconclusiveMatchError as InconclusiveMatchError,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #25a6002cbb68830d capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:64

from posthog.feature_flags import (
    RequiresServerEvaluation as RequiresServerEvaluation,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fa5939a8c6bd3008 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:67

from posthog.flag_definition_cache import (
    FlagDefinitionCacheData as FlagDefinitionCacheData,
    FlagDefinitionCacheProvider as FlagDefinitionCacheProvider,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7b29141cb39e18e3 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:71

from posthog.request import (
    disable_connection_reuse as disable_connection_reuse,
    enable_keep_alive as enable_keep_alive,
    set_socket_options as set_socket_options,
    SocketOptions as SocketOptions,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0aaec33fa69ee8ad capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:77

from posthog.types import (
    BeforeSendCallback as BeforeSendCallback,
    FeatureFlag as FeatureFlag,
    FlagValue as FlagValue,
    FlagsAndPayloads as FlagsAndPayloads,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b91391b60da3a21e capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:83

from posthog.types import (
    FeatureFlagResult as FeatureFlagResult,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9dfbcd7eab7611cd capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/__init__.py:86

from posthog.version import VERSION

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #18ed681c0e19f63f capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/__init__.py:1

from posthog.ai.prompts import PromptResult, PromptSource, Prompts

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a12b1c3ef3fe39d2 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic.py:13

from posthog.ai.types import StreamingContentBlock, TokenUsage, ToolInProgress

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #67a97a2e20e4f2d0 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic.py:14

from posthog.ai.utils import (
    call_llm_and_track_usage,
    merge_usage_stats,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #14a4dd324b1ac815 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic.py:18

from posthog.ai.anthropic.anthropic_converter import (
    extract_anthropic_usage_from_event,
    handle_anthropic_content_block_start,
    handle_anthropic_text_delta,
    handle_anthropic_tool_delta,
    finalize_anthropic_tool_input,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2d191e8701e5b010 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic.py:25

from posthog.ai.sanitization import sanitize_anthropic

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9e59125ebad3c4cc capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic.py:26

from posthog.client import Client as PostHogClient

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a4802566e3fa4fdf capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic.py:27

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #967c6287249bcf84 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic.py:244

        from posthog.ai.types import StreamingEventData

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4497c00d877023c5 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic.py:245

        from posthog.ai.anthropic.anthropic_converter import (
            format_anthropic_streaming_input,
            format_anthropic_streaming_output_complete,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9c2071966e83b1df capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic.py:249

        from posthog.ai.utils import capture_streaming_event

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3ee9cd0e24c14030 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_async.py:13

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #78f70d878f68f913 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_async.py:14

from posthog.ai.stream import AsyncStreamWrapper

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #906188390143ebc4 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_async.py:15

from posthog.ai.types import StreamingContentBlock, TokenUsage, ToolInProgress

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #67e54f37707efa1a capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_async.py:16

from posthog.ai.utils import (
    call_llm_and_track_usage_async,
    merge_usage_stats,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2cdf01b8148155ad capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_async.py:20

from posthog.ai.anthropic.anthropic_converter import (
    extract_anthropic_usage_from_event,
    handle_anthropic_content_block_start,
    handle_anthropic_text_delta,
    handle_anthropic_tool_delta,
    finalize_anthropic_tool_input,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d338b4ea29959845 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_async.py:27

from posthog.ai.sanitization import sanitize_anthropic

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b16013a561041f12 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_async.py:28

from posthog.client import Client as PostHogClient

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #43c655a305c5ab00 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_async.py:245

        from posthog.ai.types import StreamingEventData

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cdbbfff5ec9ebce1 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_async.py:246

        from posthog.ai.anthropic.anthropic_converter import (
            format_anthropic_streaming_input,
            format_anthropic_streaming_output_complete,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #275cde8457ad1881 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_async.py:250

        from posthog.ai.utils import capture_streaming_event

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #775296ccd30c999f capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_converter.py:11

from posthog.ai.types import (
    FormattedContentItem,
    FormattedFunctionCall,
    FormattedMessage,
    FormattedTextContent,
    StreamingContentBlock,
    TokenUsage,
    ToolInProgress,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6dfbff05453f4625 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_converter.py:20

from posthog.ai.utils import serialize_raw_usage

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e420a5a90090162d capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_converter.py:435

    from posthog.ai.utils import merge_system_prompt

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #408c1bca56f41521 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_providers.py:10

from posthog.ai.anthropic.anthropic import WrappedMessages

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #60ad7dbd5cb76944 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_providers.py:11

from posthog.ai.anthropic.anthropic_async import AsyncWrappedMessages

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #661dc8eb4a50f19e capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_providers.py:12

from posthog.client import Client as PostHogClient

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e323075b3d87497c capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/anthropic/anthropic_providers.py:13

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3de1c88505a8121e capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/claude_agent_sdk/__init__.py:9

    from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c1bf9e972875e3f9 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/claude_agent_sdk/__init__.py:18

from posthog.ai.claude_agent_sdk.client import PostHogClaudeSDKClient

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d0d0452c84fa9825 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/claude_agent_sdk/__init__.py:19

from posthog.ai.claude_agent_sdk.processor import PostHogClaudeAgentProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #eab071f7689ab4ab capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/claude_agent_sdk/client.py:26

from posthog.ai.claude_agent_sdk.processor import (
    PostHogClaudeAgentProcessor,
    _GenerationTracker,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #90a9e92c8a3272ca capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/claude_agent_sdk/client.py:30

from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5a95d545dae5e86b capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/claude_agent_sdk/processor.py:27

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c7752da853aa8996 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/claude_agent_sdk/processor.py:28

from posthog.ai.utils import _capture_ai_event

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #19eaa91c9f298bcc capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/claude_agent_sdk/processor.py:29

from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cc9d653d2f72e8ba capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini.py:6

from posthog.ai.types import TokenUsage, StreamingEventData

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b6b6a1797021f775 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini.py:7

from posthog.ai.utils import merge_system_prompt

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #06022619bbba0149 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini.py:16

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3aca581bf893251c capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini.py:17

from posthog.ai.utils import (
    call_llm_and_track_usage,
    _capture_ai_event,
    capture_streaming_event,
    merge_usage_stats,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c1cad77b6e1a021c capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini.py:23

from posthog.ai.gemini.gemini_converter import (
    extract_gemini_embedding_token_count,
    extract_gemini_usage_from_chunk,
    extract_gemini_content_from_chunk,
    extract_gemini_stop_reason_from_chunk,
    format_gemini_streaming_output,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b7188e6a05ded9db capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini.py:30

from posthog.ai.utils import with_privacy_mode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #35819c911135fab0 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini.py:31

from posthog.ai.sanitization import sanitize_gemini

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a242c74f56326d9d capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini.py:32

from posthog.client import Client as PostHogClient

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c83acc8a17282cec capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_async.py:6

from posthog.ai.stream import AsyncStreamWrapper

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7e8cbe7ab53e92c4 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_async.py:7

from posthog.ai.types import TokenUsage, StreamingEventData

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e0d37b662a7ca615 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_async.py:8

from posthog.ai.utils import merge_system_prompt

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7d91312dc1714680 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_async.py:17

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6f9459ec1b6e1c4d capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_async.py:18

from posthog.ai.utils import (
    call_llm_and_track_usage_async,
    _capture_ai_event,
    capture_streaming_event,
    merge_usage_stats,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #94abf535ec825c0b capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_async.py:24

from posthog.ai.gemini.gemini_converter import (
    extract_gemini_embedding_token_count,
    extract_gemini_usage_from_chunk,
    extract_gemini_content_from_chunk,
    extract_gemini_stop_reason_from_chunk,
    format_gemini_streaming_output,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #469a965839e548e4 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_async.py:31

from posthog.ai.utils import with_privacy_mode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #588adbd0434c0506 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_async.py:32

from posthog.ai.sanitization import sanitize_gemini

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6a227a2694e1f214 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_async.py:33

from posthog.client import Client as PostHogClient

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #03a426595d995cb6 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_converter.py:10

from posthog.ai.types import (
    FormattedContentItem,
    FormattedMessage,
    TokenUsage,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2d4b997e5e123215 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_converter.py:15

from posthog.ai.utils import serialize_raw_usage

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #388895fe3d330cd0 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/gemini/gemini_converter.py:370

            from posthog.ai.types import FormattedMessage

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e80cd7f3610766e1 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/langchain/callbacks.py:44

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b968f8aa026d266c capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/langchain/callbacks.py:45

from posthog.ai.gateway import warn_if_posthog_ai_gateway

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7babb6e085114a4b capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/langchain/callbacks.py:46

from posthog.ai.sanitization import sanitize_langchain

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f2abf2f58037dc14 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/langchain/callbacks.py:47

from posthog.ai.utils import _capture_ai_event, get_model_params, with_privacy_mode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #af22a3f49cf09e37 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/langchain/callbacks.py:48

from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d8f79c81fe140c44 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:5

from posthog.ai.types import TokenUsage

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5c479ee4d2efb63e capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:14

from posthog.ai.utils import (
    call_llm_and_track_usage,
    _capture_ai_event,
    extract_available_tool_calls,
    merge_usage_stats,
    with_privacy_mode,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d56896ce2a9d5ae1 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:21

from posthog.ai.openai.openai_converter import (
    extract_openai_usage_from_chunk,
    extract_openai_content_from_chunk,
    extract_openai_tool_calls_from_chunk,
    accumulate_openai_tool_calls,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bc6baf25559488e4 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:27

from posthog.ai.sanitization import sanitize_openai, sanitize_openai_response

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ad44fd46436b6c69 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:28

from posthog.client import Client as PostHogClient

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0760be4a2a5534d7 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:29

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5db20abe9b528fd3 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:30

from posthog.ai.openai.wrapper_utils import _OpenAIWrapperResource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #db7ac70de8a6750a capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:239

        from posthog.ai.types import StreamingEventData

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #40f22dfd54f05ee7 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:240

        from posthog.ai.openai.openai_converter import (
            format_openai_streaming_input,
            format_openai_streaming_output,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #984da2d0f21c0089 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:244

        from posthog.ai.utils import capture_streaming_event

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #58f1b6aadda30512 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:510

        from posthog.ai.types import StreamingEventData

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #891883faba1be140 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:511

        from posthog.ai.openai.openai_converter import (
            format_openai_streaming_input,
            format_openai_streaming_output,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b867b81cfd1f408c capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai.py:515

        from posthog.ai.utils import capture_streaming_event

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #61933800fdde1e78 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_async.py:5

from posthog.ai.stream import AsyncStreamWrapper

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #235759d4db12b272 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_async.py:6

from posthog.ai.types import TokenUsage

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e012fa77121dd904 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_async.py:15

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #eacade56f81109d0 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_async.py:16

from posthog.ai.utils import (
    call_llm_and_track_usage_async,
    _capture_ai_event,
    extract_available_tool_calls,
    get_model_params,
    merge_usage_stats,
    with_privacy_mode,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d75c3c67eb4b489e capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_async.py:24

from posthog.ai.openai.openai_converter import (
    extract_openai_usage_from_chunk,
    extract_openai_content_from_chunk,
    extract_openai_tool_calls_from_chunk,
    accumulate_openai_tool_calls,
    format_openai_streaming_output,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e330c56d4d4a021c capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_async.py:31

from posthog.ai.sanitization import sanitize_openai, sanitize_openai_response

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #47d0f4d669ed192d capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_async.py:32

from posthog.client import Client as PostHogClient

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d99f9ebc68fd6660 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_async.py:33

from posthog.ai.openai.wrapper_utils import _OpenAIWrapperResource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5841bfca4a291223 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_converter.py:11

from posthog.ai.types import (
    FormattedContentItem,
    FormattedFunctionCall,
    FormattedImageContent,
    FormattedMessage,
    FormattedTextContent,
    TokenUsage,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #543ea0372e7d798d capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_converter.py:19

from posthog.ai.utils import serialize_raw_usage

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a6161b46f9a174b0 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_converter.py:769

    from posthog.ai.utils import merge_system_prompt

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a7fafba5f648e261 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_providers.py:8

from posthog.ai.openai.openai import (
    WrappedBeta,
    WrappedChat,
    WrappedEmbeddings,
    WrappedResponses,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #27b8e377a339d069 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_providers.py:14

from posthog.ai.openai.openai_async import WrappedBeta as AsyncWrappedBeta

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b448a6f820a98a65 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_providers.py:15

from posthog.ai.openai.openai_async import WrappedChat as AsyncWrappedChat

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #dc81c8068dd573fb capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_providers.py:16

from posthog.ai.openai.openai_async import WrappedEmbeddings as AsyncWrappedEmbeddings

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #27dfccab5da6dc87 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_providers.py:17

from posthog.ai.openai.openai_async import WrappedResponses as AsyncWrappedResponses

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #472141edb9478187 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_providers.py:20

from posthog.client import Client as PostHogClient

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #21a3a2c66a6b87bf capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai/openai_providers.py:21

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9686601e7080c2e5 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai_agents/__init__.py:8

    from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #459694f0361cdbfa capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai_agents/__init__.py:17

from posthog.ai.openai_agents.processor import PostHogTracingProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #93007d4ac336cd35 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai_agents/processor.py:23

from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fbe6f596033f8e35 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai_agents/processor.py:24

from posthog.ai.utils import _capture_ai_event

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8aefde1512427599 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/openai_agents/processor.py:25

from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f3e703b918474c87 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/__init__.py:29

from posthog.ai.otel.exporter import PostHogTraceExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cfd4949ca63777f5 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/__init__.py:30

from posthog.ai.otel.processor import PostHogSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8c629f87bd620a85 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/__init__.py:31

from posthog.ai.otel.spans import is_ai_span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5b539afeea674dfc capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/exporter.py:10

from opentelemetry.sdk.trace import ReadableSpan

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #501ba2a041f60b02 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/exporter.py:11

from opentelemetry.sdk.trace.export import SpanExporter, SpanExportResult

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6327dc9e6adc2f80 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/exporter.py:12

from opentelemetry.exporter.otlp.proto.http.trace_exporter import OTLPSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #043743823d2a3ea1 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/processor.py:10

from opentelemetry.context import Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f190c88abf841279 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/processor.py:11

from opentelemetry.sdk.trace import ReadableSpan, Span, SpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bd0c680500142617 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/processor.py:12

from opentelemetry.sdk.trace.export import BatchSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1fd7630ed88f59d4 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/processor.py:13

from opentelemetry.exporter.otlp.proto.http.trace_exporter import OTLPSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #dc45734eceb256f7 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/otel/spans.py:6

    from opentelemetry.sdk.trace import ReadableSpan

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d2c10658393d7815 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/prompts.py:15

from posthog.request import USER_AGENT, _get_session

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6e6c166021496b1b capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/prompts.py:16

from posthog.utils import remove_trailing_slash

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #820d145329257d40 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:5

from posthog import get_tags, identify_context, new_context, tag, contexts

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7a56eae0af06a3d8 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:6

from posthog.ai.gateway import warn_if_posthog_ai_gateway

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2047b4557775b213 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:7

from posthog.ai.sanitization import (
    _multimodal_capture_enabled,
    sanitize_anthropic,
    sanitize_gemini,
    sanitize_langchain,
    sanitize_openai,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bd9ffb6c3b24028f capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:14

from posthog.ai.types import FormattedMessage, StreamingEventData, TokenUsage

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8eeb91be718c72ba capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:15

from posthog.client import Client as PostHogClient

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #117534a449af03a5 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:219

        from posthog.ai.anthropic.anthropic_converter import (
            extract_anthropic_usage_from_response,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b259bd789b007f0c capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:225

        from posthog.ai.openai.openai_converter import (
            extract_openai_usage_from_response,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #593371752262d5ed capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:231

        from posthog.ai.gemini.gemini_converter import (
            extract_gemini_usage_from_response,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3e8ceaa742d223f9 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:245

        from posthog.ai.anthropic.anthropic_converter import format_anthropic_response

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fccc3efd166c9afc capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:249

        from posthog.ai.openai.openai_converter import format_openai_response

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ac136b786e96a6fc capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:253

        from posthog.ai.gemini.gemini_converter import format_gemini_response

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bce3635e942f71d3 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:262

        from posthog.ai.openai.openai_converter import extract_openai_stop_reason

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b9f248640e47cea0 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:266

        from posthog.ai.anthropic.anthropic_converter import (
            extract_anthropic_stop_reason,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3cdf3182da3c1257 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:272

        from posthog.ai.gemini.gemini_converter import extract_gemini_stop_reason

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b2a5a30d35ccc49d capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:283

        from posthog.ai.anthropic.anthropic_converter import extract_anthropic_tools

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c5c3fb65ee6aa30b capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:287

        from posthog.ai.gemini.gemini_converter import extract_gemini_tools

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #12626b824eb8b964 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:291

        from posthog.ai.openai.openai_converter import extract_openai_tools

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f0aca9377ce30598 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:304

        from posthog.ai.anthropic.anthropic_converter import format_anthropic_input

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4a77f1a32ae42944 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:310

        from posthog.ai.gemini.gemini_converter import format_gemini_input_with_system

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cf87897462a7f4cf capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/ai/utils.py:316

        from posthog.ai.openai.openai_converter import format_openai_input

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4673228d9e48894a capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/args.py:18

from posthog.types import SendFeatureFlagsOptions

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #83afe762da4128b7 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/args.py:21

    from posthog.feature_flag_evaluations import FeatureFlagEvaluations

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #edb52d475de556ef capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/capture_v1.py:48

from posthog.capture_compression import CaptureCompression, _zstandard

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #288e33bd2efbe762 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/capture_v1.py:49

from posthog.request import (
    DatetimeSerializer,
    USER_AGENT,
    APIError,
    _get_session,
    normalize_host,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4e5bb3a6330fa969 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/capture_v1.py:56

from posthog.utils import guess_timezone as _guess_timezone, remove_trailing_slash

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3915e5f090a2d9c7 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:17

from posthog._async_utils import _BackgroundEventLoopRunner

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #81863a1f8a1e5dad capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:18

from posthog.args import ID_TYPES, ExceptionArg, OptionalCaptureArgs, OptionalSetArgs

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ed884fb5c1de7c03 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:19

from posthog.metrics_capture import PostHogMetrics

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3ef8d0de271b086b capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:20

from posthog.capture_compression import (
    CaptureCompression,
    _resolve_capture_compression,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #10940a7bc7fce80c capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:24

from posthog.capture_mode import CaptureMode, _resolve_capture_mode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #038ad059c35d9544 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:25

from posthog.capture_v1 import _send_v1_batch

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #221d6b970de3b51f capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:26

from posthog.consumer import AI_MAX_MSG_SIZE, MAX_MSG_SIZE, Consumer

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ae17575c3dbe19fa capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:27

from posthog.contexts import (
    _get_current_context,
    get_capture_exception_code_variables_context,
    get_code_variables_detect_secrets_context,
    get_code_variables_ignore_patterns_context,
    get_code_variables_mask_patterns_context,
    get_code_variables_mask_url_credentials_context,
    get_context_device_id,
    get_context_distinct_id,
    get_context_session_id,
    get_tags as _context_get_tags,
    identify_context as _context_identify_context,
    _scoped as _context_scoped,
    new_context,
    set_context_device_id as _context_set_context_device_id,
    set_context_session as _context_set_context_session,
    tag as _context_tag,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #32dded8a3e6b8fe9 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:45

from posthog.exception_capture import ExceptionCapture

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b4568c06998ba4c2 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:46

from posthog._logging import _configure_posthog_logging

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fda51aab713f0835 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:47

from posthog.exception_utils import (
    DEFAULT_CODE_VARIABLES_DETECT_SECRETS,
    DEFAULT_CODE_VARIABLES_IGNORE_PATTERNS,
    DEFAULT_CODE_VARIABLES_MASK_PATTERNS,
    DEFAULT_CODE_VARIABLES_MASK_URL_CREDENTIALS,
    exc_info_from_error,
    exception_is_already_captured,
    exceptions_from_error_tuple,
    _get_current_otel_span_properties,
    handle_in_app,
    mark_exception_as_captured,
    try_attach_code_variables_to_frames,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4fcf49e466fb38d1 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:60

from posthog.feature_flag_evaluations import (
    FeatureFlagEvaluations,
    _EvaluatedFlagRecord,
    _FeatureFlagEvaluationsHost,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #192024ba5e0ba6fb capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:65

from posthog.feature_flags import (
    InconclusiveMatchError,
    RequiresServerEvaluation,
    match_feature_flag_properties,
    resolve_bucketing_value,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fac5fc106ce0139a capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:71

from posthog.flag_definition_cache import (
    FlagDefinitionCacheData,
    FlagDefinitionCacheProvider,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #46b182a38910f7c9 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:75

from posthog.poller import Poller

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e19afa43a5189888 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:76

from posthog.request import (
    AI_EVENTS_ENDPOINT,
    EVENTS_ENDPOINT,
    APIError,
    QuotaLimitError,
    RequestsConnectionError,
    RequestsTimeout,
    batch_post,
    determine_server_host,
    flags,
    get,
    normalize_host,
    remote_config,
    reset_sessions,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e594af043aa9b2bf capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:91

from posthog.types import (
    FeatureFlag,
    FeatureFlagError,
    FeatureFlagResult,
    FlagMetadata,
    FlagsAndPayloads,
    FlagsResponse,
    FlagValue,
    SendFeatureFlagsOptions,
    normalize_flags_response,
    to_flags_and_payloads,
    to_payloads,
    to_values,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a8c05c9cddfad27a capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:105

from posthog.utils import (
    FlagCache,
    RedisFlagCache,
    SizeLimitedDict,
    clean,
    guess_timezone,
    system_context,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e4be3ef7762e6393 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/client.py:113

from posthog.version import VERSION

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #38bb5bcb1729f7de capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/consumer.py:7

from posthog._logging import _configure_posthog_logging

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2df2f16ba4e556af capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/consumer.py:8

from posthog.capture_compression import CaptureCompression

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d58f46a1d426dcb3 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/consumer.py:9

from posthog.capture_mode import CaptureMode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #072c0e9c94ed4f7c capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/consumer.py:10

from posthog.capture_v1 import _send_v1_batch

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ffa8911f54da0a2d capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/consumer.py:11

from posthog.request import (
    EVENTS_ENDPOINT,
    APIError,
    DatetimeSerializer,
    batch_post,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #93fc16366484cb85 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/contexts.py:7

    from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c7d632189329ebce capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/exception_capture.py:12

from posthog.bucketed_rate_limiter import BucketedRateLimiter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #591b6af4e94a48da capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/exception_capture.py:13

from posthog.exception_utils import walk_exception_chain

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4bfcff850f26c699 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/exception_capture.py:16

    from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4c8007fc6ea692b1 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/exception_utils.py:37

from posthog.args import ExceptionArg, ExcInfo  # noqa: F401

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #da20bc9180585d80 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/exception_utils.py:103

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c9fa51d068a6de04 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/feature_flag_evaluations.py:11

from posthog.types import FlagValue

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bf368655488c054f capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/feature_flags.py:10

from posthog import utils

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8ff77dc4e1cb1777 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/feature_flags.py:11

from posthog.types import FlagValue

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7c426fda1eb5ba91 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/feature_flags.py:12

from posthog.utils import convert_to_datetime_aware, is_valid_regex

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7d89f632630ae85c capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/integrations/celery.py:468

            from posthog import capture

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #67950ea744a765ac capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/integrations/celery.py:470

            capture(event, properties=properties)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3809664bb8bb7527 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/integrations/celery.py:476

            from posthog import capture_exception

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #993fcba33dec89ac capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/integrations/django.py:368

            from posthog import capture_exception

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fde8f47dd3d60c6f capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/mcp/__init__.py:29

from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a3cfcd1eb956a910 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/mcp/__init__.py:126

        from posthog import setup

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b515e2e2739932b6 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/mcp/_exceptions.py:15

from posthog.exception_utils import exceptions_from_error_tuple

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #72d1a3a50da00649 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/mcp/_sink.py:20

from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #95ebb8f93746e219 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/mcp/posthog_mcp.py:17

from posthog.client import Client

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3ffd01a1f7783def capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/metrics_capture.py:36

from posthog.request import _get_session

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #244bd47e32d0730d capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/metrics_capture.py:37

from posthog.utils import remove_trailing_slash

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #45940617f308450a capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/metrics_capture.py:38

from posthog.version import VERSION

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d9d61e12c036752e capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/request.py:18

from posthog._logging import _configure_posthog_logging

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d4bd1916a062beea capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/request.py:19

from posthog.utils import remove_trailing_slash

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #828ab14af8d993dd capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/posthog/request.py:20

from posthog.version import VERSION

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 7 low-confidence finding(s)

low env_fs — Environment-variable access. 4 locations

pkgs/python/[email protected]/posthog/ai/gemini/gemini.py:191

pkgs/python/[email protected]/posthog/ai/gemini/gemini_async.py:192

pkgs/python/[email protected]/posthog/capture_compression.py:105

pkgs/python/[email protected]/posthog/capture_mode.py:70

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations

pkgs/python/[email protected]/posthog/capture_v1.py:381

pkgs/python/[email protected]/posthog/metrics_capture.py:611

pkgs/python/[email protected]/posthog/request.py:251

azure-search-documents

python dependency

medium pii_flow dependency Excluded from app score #c8c6a451e5ad04bf — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:70 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:45 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:70

    print(f"Retrieved: knowledge source '{knowledge_source.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #85f2154e86e07fea — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:127 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:45 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:127

    print(f"Retrieved: knowledge base '{knowledge_base.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1328015b56c2ea62 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:73 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:46 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:73

    print(f"Retrieved: knowledge source '{knowledge_source.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fc271068493fcf87 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:134 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:46 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:134

    print(f"Retrieved: knowledge base '{knowledge_base.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0b45945d298f09f4 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication.py:39 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_authentication.py:32 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_authentication.py:39

    print(f"Document count: {document_count} (index '{index_name}')")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a009fed8c9c2c0f0 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication.py:55 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_authentication.py:48 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_authentication.py:55

    print(f"Indexes ({len(names)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #035c548ec90054e5 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication_async.py:41 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_authentication_async.py:33 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_authentication_async.py:41

    print(f"Document count: {document_count} (index '{index_name}')")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5c627491e1cb3bfb — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_authentication_async.py:58 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_authentication_async.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_authentication_async.py:58

    print(f"Indexes ({len(names)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #396595a4e0ac0620 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:59 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud.py:59

    print(f"Uploaded: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a72a12cf4c41faa7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:72 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud.py:72

    print(f"Merged: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #01fbea4b3ab958d1 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:87 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud.py:87

    print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #aafa3ce3095d73f9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:100 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud.py:100

    print(f"Deleted: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6f786341b6db39cd — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud.py:115 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud.py:115

    print(f"Merge or upload: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d632da5399f2157c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:61 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:61

    print(f"Uploaded: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1f7e8527f00877df — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:77 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:77

    print(f"Merged: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #456f76d3c52b3799 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:93 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:93

    print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #352dd5d1c0550d43 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:107 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:107

    print(f"Deleted: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4da608f7c8ef8609 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:123 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_documents_crud_async.py:123

    print(f"Merge or upload: document 100 (succeeded={result[0].succeeded})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5a25d920bd66077b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:42 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:42

    print(f"Created: alias '{result.name}' -> index '{index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8ca78c8d69ed1375 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:54 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:54

    print(f"Retrieved: alias '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d8d62e03056d877c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:108 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud.py:108

    print(f"Updated: alias '{result.name}' -> index '{new_index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5dc9b37bf982917d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:44 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:44

    print(f"Created: alias '{result.name}' -> index '{index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #98031a7ba17a8330 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:57 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:57

    print(f"Retrieved: alias '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3da5be8296616fd4 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:112 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:112

    print(f"Updated: alias '{result.name}' -> index '{new_index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fe4099c0ddbc717c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_analyze_text.py:43 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_analyze_text.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_analyze_text.py:43

        print(f"  Token: {token.token}, Start: {token.start_offset}, End: {token.end_offset}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6031fb4268edfa27 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:45 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:45

        print(f"  Token: {token.token}, Start: {token.start_offset}, End: {token.end_offset}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2cf67ffcca4506b9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:46 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:33 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:46

    print(f"Response: {response_body}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a9e31bb4d3ac7c6c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:51 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:37 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:51

    print(f"Response: {response_body}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2a49f843b0bc2e0d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:69 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud.py:69

    print(f"Created: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #91d021e8a90081f3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:80 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud.py:80

    print(f"Retrieved: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #88967692bdb05b79 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:126 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud.py:126

    print(f"Updated: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #784e43779acba72e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud.py:139 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud.py:139

        print(f"  - {name}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #be799bbc050b86ea — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:72 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud_async.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud_async.py:72

    print(f"Created: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e81023a86f7d7fc8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:84 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud_async.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud_async.py:84

    print(f"Retrieved: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #277e111284b16231 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_crud_async.py:132 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud_async.py:27 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_crud_async.py:132

    print(f"Updated: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2d3d68c0075edc87 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:43 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:43

    print(f"Created: synonym map '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8556089cffe8a434 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:59 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:59

        print(f"Created: synonym map '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e3d74b4b10ceedbc — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:71 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:71

    print(f"Synonym maps ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #552c4d6cc158386b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:85 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:85

            print(f"  {syn}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #65d7bf3cf88a2c45 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:45 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:45

    print(f"Created: synonym map '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #82f633723679eb0a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:62 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:62

        print(f"Created: synonym map '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #449fa26c261696ae — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:75 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:75

    print(f"Synonym maps ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9eabee508a681931 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:90 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:90

            print(f"  {syn}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #57d6ced509c00fb6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:74 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud.py:74

    print(f"Created: indexer '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c0bf5b19d0d75832 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:87 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud.py:87

    print(f"Indexers ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5eb7b6e295656fc7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:99 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud.py:99

    print(f"Retrieved: indexer '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #38c52cfa63eed790 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud.py:112 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud.py:112

    print(f"Status: indexer '{indexer_name}' is {status.status}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5ca8f58d3d73ea89 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:80 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:80

        print(f"Created: indexer '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3bac60a867e33fe3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:94 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:94

    print(f"Indexers ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0188d8d648d5df96 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:107 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:107

    print(f"Retrieved: indexer '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9a5ca69eea284eb8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:121 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:121

    print(f"Status: indexer '{indexer_name}' is {result.status}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #49836241ad64b870 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:51 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:51

    print(f"Created: data source '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9c2f8d235501d5a8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:64 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:64

    print(f"Data sources ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #962ca4944eb5f789 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:76 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:76

    print(f"Retrieved: data source '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #19db7f1cb28b2856 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:52 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:52

    print(f"Created: data source '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a5c8bdae59a8dc1e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:66 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:66

    print(f"Data sources ({len(result)}): {', '.join(names)}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a24518682cc845ab — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:79 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:79

    print(f"Retrieved: data source '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4267fcd71e8f2b18 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:119 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:119

    print(f"Retrieved: indexer '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6a16ae7dd0c2ce7b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:130 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:130

        print(f"Scheduled: indexer every {updated_indexer.schedule.interval}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f61ceb9d13102121 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:134 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_indexer_workflow.py:134

    print(f"Status: indexer '{updated_indexer.name}' is {status.status}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1a4b1e3516091727 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_autocomplete.py:40 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_autocomplete.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_autocomplete.py:40

        print(f"  Completion: {result['text']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #12384818cbbace91 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:43 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:28 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:43

            print(f"  Completion: {result['text']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #49dfd37a2e68b542 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_facets.py:43 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_facets.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_facets.py:43

            print(f"  {facet}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #00a4678c64cd7fc6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_facets_async.py:46 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_facets_async.py:28 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_facets_async.py:46

                print(f"  {facet}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0bea9df9b92148d8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_filter.py:45 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_filter.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_filter.py:45

        print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3b21567d0de2263d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_filter_async.py:48 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_filter_async.py:28 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_filter_async.py:48

            print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #531cd656db996a1b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:66 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic.py:66

        print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8717867a5b5d77c4 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:67 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic.py:67

        print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #91064e49faba26a6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:89 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic.py:89

        print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #cb1e71c228f09afa — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic.py:90 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic.py:90

        print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c3ae0a5424e57c0a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:69 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:69

            print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a0d8aa02d227e40d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:70 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:70

            print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2e448375b62c2a54 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:91 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:91

            print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #66230f85db5c8400 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:92 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_semantic_async.py:92

            print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6768af216c38f6de — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_session.py:38 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_session.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_session.py:38

        print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #cc785b3a0ba5b1c1 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_session_async.py:40 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_session_async.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_session_async.py:40

            print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #76ee684e54778976 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_simple.py:38 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_simple.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_simple.py:38

        print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2d7c9c9806ed18d2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_simple_async.py:41 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_simple_async.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_simple_async.py:41

            print(f"  HotelName: {result['HotelName']} (rating {result['Rating']})")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #39b3f382c0946950 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_suggestions.py:39 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_suggestions.py:24 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_suggestions.py:39

        print(f"  Text: {result['text']!r}, HotelName: {hotel['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #79a86bb1608dfb2f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:42 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:42

            print(f"  Text: {result['text']!r}, HotelName: {hotel['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0225b4a16d784899 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:130 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:130

    print(f"Created: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6c88a56c86cb5deb — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:148 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:148

    print(f"Uploaded: {len(result)} documents to index '{index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #53b819bf1d2ff6fe — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:170 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:170

        print(
            f"  HotelId: {result['HotelId']}, HotelName: {result['HotelName']}, " f"Category: {result.get('Category')}"
        )

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #b43f16c7ae8525d1 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:196 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:196

        print(f"  HotelId: {result['HotelId']}, HotelName: {result['HotelName']}, " f"Tags: {result.get('Tags')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a9de087f102f114e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:221 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:221

        print(f"  Score: {score}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #62d0bf837b4575d9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:222 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:222

        print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #657a8e943bef6a62 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:223 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:223

        print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f83b1276b58068a5 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:224 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:224

        print(f"  Description: {result.get('Description')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e2f0ccc7fe21c6f8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:225 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:225

        print(f"  Category: {result.get('Category')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4c2aa975299f6224 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector.py:226 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:50 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector.py:226

        print(f"  Tags: {result.get('Tags', 'N/A')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3b64125c6a7ff247 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:134 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:134

    print(f"Created: index '{result.name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9bf1f129ecb9b7c4 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:153 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:153

    print(f"Uploaded: {len(result)} documents to index '{index_name}'")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d20b6546b21cb21c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:176 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:176

            print(
                f"  HotelId: {result['HotelId']}, HotelName: {result['HotelName']}, "
                f"Category: {result.get('Category')}"
            )

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #38c957f6270ec847 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:204 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:204

            print(f"  HotelId: {result['HotelId']}, HotelName: {result['HotelName']}, " f"Tags: {result.get('Tags')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #b6c478eb2361dcbf — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:230 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:230

            print(f"  Score: {score}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5a685f1a99fc2bd8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:231 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:231

            print(f"  HotelId: {result['HotelId']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8ccdbc3238dccad6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:232 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:232

            print(f"  HotelName: {result['HotelName']}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9b7c79300f637438 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:233 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:233

            print(f"  Description: {result.get('Description')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #edd46b0f74a786d2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:234 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:234

            print(f"  Category: {result.get('Category')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #31d2fc62f8448979 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_query_vector_async.py:235 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:52 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_query_vector_async.py:235

            print(f"  Tags: {result.get('Tags', 'N/A')}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1b0390bfd8643a08 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:42 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:25 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:42

    print(f"Document count: {response_body} (index '{index_name}')")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #04740eefac614b60 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:48 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:26 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:48

    print(f"Document count: {response_body} (index '{index_name}')")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 133 low-confidence finding(s)

low env_fs — Environment-variable access. 127 locations

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:43

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:44

pkgs/python/[email protected]/samples/sample_agentic_retrieval.py:45

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:44

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:45

pkgs/python/[email protected]/samples/sample_agentic_retrieval_async.py:46

pkgs/python/[email protected]/samples/sample_authentication.py:30

pkgs/python/[email protected]/samples/sample_authentication.py:31

pkgs/python/[email protected]/samples/sample_authentication.py:32

pkgs/python/[email protected]/samples/sample_authentication.py:47

pkgs/python/[email protected]/samples/sample_authentication.py:48

pkgs/python/[email protected]/samples/sample_authentication.py:63

pkgs/python/[email protected]/samples/sample_authentication.py:64

pkgs/python/[email protected]/samples/sample_authentication.py:80

pkgs/python/[email protected]/samples/sample_authentication_async.py:31

pkgs/python/[email protected]/samples/sample_authentication_async.py:32

pkgs/python/[email protected]/samples/sample_authentication_async.py:33

pkgs/python/[email protected]/samples/sample_authentication_async.py:49

pkgs/python/[email protected]/samples/sample_authentication_async.py:50

pkgs/python/[email protected]/samples/sample_authentication_async.py:66

pkgs/python/[email protected]/samples/sample_authentication_async.py:67

pkgs/python/[email protected]/samples/sample_authentication_async.py:84

pkgs/python/[email protected]/samples/sample_documents_buffered_sender.py:24

pkgs/python/[email protected]/samples/sample_documents_buffered_sender.py:25

pkgs/python/[email protected]/samples/sample_documents_buffered_sender.py:26

pkgs/python/[email protected]/samples/sample_documents_buffered_sender_async.py:25

pkgs/python/[email protected]/samples/sample_documents_buffered_sender_async.py:26

pkgs/python/[email protected]/samples/sample_documents_buffered_sender_async.py:27

pkgs/python/[email protected]/samples/sample_documents_crud.py:24

pkgs/python/[email protected]/samples/sample_documents_crud.py:25

pkgs/python/[email protected]/samples/sample_documents_crud.py:26

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:25

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:26

pkgs/python/[email protected]/samples/sample_documents_crud_async.py:27

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:25

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:26

pkgs/python/[email protected]/samples/sample_index_alias_crud.py:27

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:26

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:27

pkgs/python/[email protected]/samples/sample_index_alias_crud_async.py:28

pkgs/python/[email protected]/samples/sample_index_analyze_text.py:24

pkgs/python/[email protected]/samples/sample_index_analyze_text.py:25

pkgs/python/[email protected]/samples/sample_index_analyze_text.py:26

pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:25

pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:26

pkgs/python/[email protected]/samples/sample_index_analyze_text_async.py:27

pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:31

pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:32

pkgs/python/[email protected]/samples/sample_index_client_custom_request.py:33

pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:35

pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:36

pkgs/python/[email protected]/samples/sample_index_client_custom_request_async.py:37

pkgs/python/[email protected]/samples/sample_index_crud.py:25

pkgs/python/[email protected]/samples/sample_index_crud.py:26

pkgs/python/[email protected]/samples/sample_index_crud_async.py:26

pkgs/python/[email protected]/samples/sample_index_crud_async.py:27

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:22

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:23

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:23

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:24

pkgs/python/[email protected]/samples/sample_indexer_crud.py:24

pkgs/python/[email protected]/samples/sample_indexer_crud.py:25

pkgs/python/[email protected]/samples/sample_indexer_crud.py:26

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:25

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:26

pkgs/python/[email protected]/samples/sample_indexer_crud_async.py:27

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:24

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:25

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud.py:26

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:25

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:26

pkgs/python/[email protected]/samples/sample_indexer_datasource_crud_async.py:27

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:24

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:25

pkgs/python/[email protected]/samples/sample_indexer_workflow.py:26

pkgs/python/[email protected]/samples/sample_query_autocomplete.py:24

pkgs/python/[email protected]/samples/sample_query_autocomplete.py:25

pkgs/python/[email protected]/samples/sample_query_autocomplete.py:26

pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:26

pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:27

pkgs/python/[email protected]/samples/sample_query_autocomplete_async.py:28

pkgs/python/[email protected]/samples/sample_query_facets.py:24

pkgs/python/[email protected]/samples/sample_query_facets.py:25

pkgs/python/[email protected]/samples/sample_query_facets.py:26

pkgs/python/[email protected]/samples/sample_query_facets_async.py:26

pkgs/python/[email protected]/samples/sample_query_facets_async.py:27

pkgs/python/[email protected]/samples/sample_query_facets_async.py:28

pkgs/python/[email protected]/samples/sample_query_filter.py:24

pkgs/python/[email protected]/samples/sample_query_filter.py:25

pkgs/python/[email protected]/samples/sample_query_filter.py:26

pkgs/python/[email protected]/samples/sample_query_filter_async.py:26

pkgs/python/[email protected]/samples/sample_query_filter_async.py:27

pkgs/python/[email protected]/samples/sample_query_filter_async.py:28

pkgs/python/[email protected]/samples/sample_query_semantic.py:22

pkgs/python/[email protected]/samples/sample_query_semantic.py:23

pkgs/python/[email protected]/samples/sample_query_semantic.py:24

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:23

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:24

pkgs/python/[email protected]/samples/sample_query_semantic_async.py:25

pkgs/python/[email protected]/samples/sample_query_session.py:22

pkgs/python/[email protected]/samples/sample_query_session.py:23

pkgs/python/[email protected]/samples/sample_query_session.py:24

pkgs/python/[email protected]/samples/sample_query_session_async.py:23

pkgs/python/[email protected]/samples/sample_query_session_async.py:24

pkgs/python/[email protected]/samples/sample_query_session_async.py:25

pkgs/python/[email protected]/samples/sample_query_simple.py:22

pkgs/python/[email protected]/samples/sample_query_simple.py:23

pkgs/python/[email protected]/samples/sample_query_simple.py:24

pkgs/python/[email protected]/samples/sample_query_simple_async.py:24

pkgs/python/[email protected]/samples/sample_query_simple_async.py:25

pkgs/python/[email protected]/samples/sample_query_simple_async.py:26

pkgs/python/[email protected]/samples/sample_query_suggestions.py:22

pkgs/python/[email protected]/samples/sample_query_suggestions.py:23

pkgs/python/[email protected]/samples/sample_query_suggestions.py:24

pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:24

pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:25

pkgs/python/[email protected]/samples/sample_query_suggestions_async.py:26

pkgs/python/[email protected]/samples/sample_query_vector.py:49

pkgs/python/[email protected]/samples/sample_query_vector.py:50

pkgs/python/[email protected]/samples/sample_query_vector_async.py:51

pkgs/python/[email protected]/samples/sample_query_vector_async.py:52

pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:23

pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:24

pkgs/python/[email protected]/samples/sample_search_client_custom_request.py:25

pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:24

pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:25

pkgs/python/[email protected]/samples/sample_search_client_custom_request_async.py:26

low env_fs — Filesystem access. 6 locations

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud.py:54

pkgs/python/[email protected]/samples/sample_index_synonym_map_crud_async.py:56

pkgs/python/[email protected]/samples/sample_query_vector.py:60

pkgs/python/[email protected]/samples/sample_query_vector.py:134

pkgs/python/[email protected]/samples/sample_query_vector_async.py:63

pkgs/python/[email protected]/samples/sample_query_vector_async.py:138

chromadb

python dependency

medium telemetry dependency Excluded from app score #ab96294390b9af4e capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:226

        self.product_telemetry_client.capture(
            ClientCreateCollectionEvent(
                collection_uuid=str(id),
                # embedding_function=embedding_function.__class__.__name__,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2be9e599727b6089 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:429

        self.product_telemetry_client.capture(
            CollectionGetEvent(
                collection_uuid=str(collection_id),
                ids_count=ids_amount,
                limit=limit if limit else 0,
                include_metadata=ids_amount if "metadatas" in include else 0,
                include_documents=ids_amount if "documents" in include else 0,
                include_uris=ids_amount if "uris" in include else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7dca8d507005d7b8 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:474

        self.product_telemetry_client.capture(
            CollectionAddEvent(
                collection_uuid=str(collection_id),
                add_amount=len(ids),
                with_metadata=len(ids) if metadatas is not None else 0,
                with_documents=len(ids) if documents is not None else 0,
                with_uris=len(ids) if uris is not None else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3a99dd1a85089f6c capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:507

        self.product_telemetry_client.capture(
            CollectionUpdateEvent(
                collection_uuid=str(collection_id),
                update_amount=len(ids),
                with_embeddings=len(embeddings) if embeddings else 0,
                with_metadata=len(metadatas) if metadatas else 0,
                with_documents=len(documents) if documents else 0,
                with_uris=len(uris) if uris else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #158f35a92811b395 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:567

        self.product_telemetry_client.capture(
            CollectionQueryEvent(
                collection_uuid=str(collection_id),
                query_amount=query_amount,
                filtered_ids_amount=filtered_ids_amount,
                n_results=n_results,
                with_metadata_filter=query_amount if where is not None else 0,
                with_document_filter=query_amount if where_document is not None else 0,
                include_metadatas=query_amount if "metadatas" in include else 0,
                include_documents=query_amount if "documents" in include else 0,
                include_uris=query_amount if "uris" in include else 0,
                include_distances=query_amount if "distances" in include else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #946b71aa124a3726 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/rust.py:626

        self.product_telemetry_client.capture(
            CollectionDeleteEvent(
                collection_uuid=str(collection_id),
                delete_amount=deleted,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #841b8c9134135a32 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:285

        self._product_telemetry_client.capture(
            ClientCreateCollectionEvent(
                collection_uuid=str(id),
                # embedding_function=embedding_function.__class__.__name__,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #eeb757d9a019b15b capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:552

        self._product_telemetry_client.capture(
            CollectionAddEvent(
                collection_uuid=str(collection_id),
                add_amount=len(ids),
                with_metadata=len(ids) if metadatas is not None else 0,
                with_documents=len(ids) if documents is not None else 0,
                with_uris=len(ids) if uris is not None else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4ba4c2097b9ec071 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:607

        self._product_telemetry_client.capture(
            CollectionUpdateEvent(
                collection_uuid=str(collection_id),
                update_amount=len(ids),
                with_embeddings=len(embeddings) if embeddings else 0,
                with_metadata=len(metadatas) if metadatas else 0,
                with_documents=len(documents) if documents else 0,
                with_uris=len(uris) if uris else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6df767cc4c209545 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:714

        self._product_telemetry_client.capture(
            CollectionGetEvent(
                collection_uuid=str(collection_id),
                ids_count=ids_amount,
                limit=limit if limit else 0,
                include_metadata=ids_amount if "metadatas" in include else 0,
                include_documents=ids_amount if "documents" in include else 0,
                include_uris=ids_amount if "uris" in include else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a72089ea9870cf54 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:825

        self._product_telemetry_client.capture(
            CollectionDeleteEvent(
                collection_uuid=str(collection_id), delete_amount=deleted_count
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a8c0a1f2dd536a01 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/segment.py:890

        self._product_telemetry_client.capture(
            CollectionQueryEvent(
                collection_uuid=str(collection_id),
                query_amount=query_amount,
                filtered_ids_amount=ids_amount,
                n_results=n_results,
                with_metadata_filter=query_amount if where is not None else 0,
                with_document_filter=query_amount if where_document is not None else 0,
                include_metadatas=query_amount if "metadatas" in include else 0,
                include_documents=query_amount if "documents" in include else 0,
                include_uris=query_amount if "uris" in include else 0,
                include_distances=query_amount if "distances" in include else 0,
            )
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #44cb8c2f39cc97d0 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/api/shared_system_client.py:137

        telemetry_client.capture(ClientStartEvent())

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #89877f21d730a27e capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/execution/executor/distributed.py:22

from opentelemetry.trace import Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4445f1e3580d9a41 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/proto/utils.py:4

from opentelemetry.trace import Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #96c89c9600688172 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/server/fastapi/__init__.py:77

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9ca227985f3658d8 capability detected · no path traced — Structural telemetry/analytics emit (event capture or batched event insert). Confirm user consent and what payload is sent to the destination.

pkgs/python/[email protected]/chromadb/server/fastapi/__init__.py:245

        telemetry_client.capture(ServerStartEvent())

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a9b126c2e1145c27 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:7

from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #aeeb9a3b113a66b0 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:8

from opentelemetry.sdk.resources import SERVICE_NAME, Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5c1f2e27a0b98ee5 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:9

from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #dfe50c57d6d5c026 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:10

from opentelemetry.sdk.trace.export import (
    BatchSpanProcessor,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3639d138d1675090 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:13

from opentelemetry.exporter.otlp.proto.grpc.trace_exporter import OTLPSpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c571e7c0f580336f capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/fastapi.py:3

from opentelemetry.instrumentation.fastapi import FastAPIInstrumentor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c58ce5d03945ff04 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/grpc.py:5

from opentelemetry.trace import StatusCode, SpanKind

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 67 low-confidence finding(s)

low env_fs — Environment-variable access. 41 locations

pkgs/python/[email protected]/chromadb/__init__.py:407

pkgs/python/[email protected]/chromadb/__init__.py:420

pkgs/python/[email protected]/chromadb/__init__.py:423

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:139

pkgs/python/[email protected]/chromadb/telemetry/opentelemetry/__init__.py:155

pkgs/python/[email protected]/chromadb/telemetry/product/events.py:20

pkgs/python/[email protected]/chromadb/utils/embedding_functions/baseten_embedding_function.py:39

pkgs/python/[email protected]/chromadb/utils/embedding_functions/baseten_embedding_function.py:45

pkgs/python/[email protected]/chromadb/utils/embedding_functions/chroma_cloud_qwen_embedding_function.py:61

pkgs/python/[email protected]/chromadb/utils/embedding_functions/chroma_cloud_splade_embedding_function.py:42

pkgs/python/[email protected]/chromadb/utils/embedding_functions/cloudflare_workers_ai_embedding_function.py:57

pkgs/python/[email protected]/chromadb/utils/embedding_functions/cloudflare_workers_ai_embedding_function.py:62

pkgs/python/[email protected]/chromadb/utils/embedding_functions/cohere_embedding_function.py:46

pkgs/python/[email protected]/chromadb/utils/embedding_functions/cohere_embedding_function.py:51

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:57

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:251

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:256

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:401

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:406

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:529

pkgs/python/[email protected]/chromadb/utils/embedding_functions/google_embedding_function.py:534

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:43

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:48

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:169

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:173

pkgs/python/[email protected]/chromadb/utils/embedding_functions/jina_embedding_function.py:84

pkgs/python/[email protected]/chromadb/utils/embedding_functions/jina_embedding_function.py:89

pkgs/python/[email protected]/chromadb/utils/embedding_functions/mistral_embedding_function.py:29

pkgs/python/[email protected]/chromadb/utils/embedding_functions/morph_embedding_function.py:49

pkgs/python/[email protected]/chromadb/utils/embedding_functions/nomic_embedding_function.py:50

pkgs/python/[email protected]/chromadb/utils/embedding_functions/openai_embedding_function.py:60

pkgs/python/[email protected]/chromadb/utils/embedding_functions/openai_embedding_function.py:65

pkgs/python/[email protected]/chromadb/utils/embedding_functions/perplexity_embedding_function.py:52

pkgs/python/[email protected]/chromadb/utils/embedding_functions/perplexity_embedding_function.py:57

pkgs/python/[email protected]/chromadb/utils/embedding_functions/roboflow_embedding_function.py:48

pkgs/python/[email protected]/chromadb/utils/embedding_functions/roboflow_embedding_function.py:53

pkgs/python/[email protected]/chromadb/utils/embedding_functions/together_ai_embedding_function.py:52

pkgs/python/[email protected]/chromadb/utils/embedding_functions/together_ai_embedding_function.py:57

pkgs/python/[email protected]/chromadb/utils/embedding_functions/utils.py:11

pkgs/python/[email protected]/chromadb/utils/embedding_functions/voyageai_embedding_function.py:50

pkgs/python/[email protected]/chromadb/utils/embedding_functions/voyageai_embedding_function.py:55

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 12 locations

pkgs/python/[email protected]/chromadb/api/async_fastapi.py:167

pkgs/python/[email protected]/chromadb/api/fastapi.py:131

pkgs/python/[email protected]/chromadb/utils/embedding_functions/chroma_cloud_qwen_embedding_function.py:127

pkgs/python/[email protected]/chromadb/utils/embedding_functions/chroma_cloud_qwen_embedding_function.py:149

pkgs/python/[email protected]/chromadb/utils/embedding_functions/chroma_cloud_splade_embedding_function.py:99

pkgs/python/[email protected]/chromadb/utils/embedding_functions/cloudflare_workers_ai_embedding_function.py:99

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:76

pkgs/python/[email protected]/chromadb/utils/embedding_functions/huggingface_embedding_function.py:199

pkgs/python/[email protected]/chromadb/utils/embedding_functions/jina_embedding_function.py:202

pkgs/python/[email protected]/chromadb/utils/embedding_functions/jina_embedding_function.py:210

pkgs/python/[email protected]/chromadb/utils/embedding_functions/roboflow_embedding_function.py:97

pkgs/python/[email protected]/chromadb/utils/embedding_functions/roboflow_embedding_function.py:110

low env_fs — Filesystem access. 12 locations

pkgs/python/[email protected]/chromadb/auth/__init__.py:124

pkgs/python/[email protected]/chromadb/auth/__init__.py:235

pkgs/python/[email protected]/chromadb/cli/utils.py:12

pkgs/python/[email protected]/chromadb/db/migrations.py:256

pkgs/python/[email protected]/chromadb/segment/impl/vector/local_persistent_hnsw.py:74

pkgs/python/[email protected]/chromadb/segment/impl/vector/local_persistent_hnsw.py:255

pkgs/python/[email protected]/chromadb/telemetry/product/__init__.py:88

pkgs/python/[email protected]/chromadb/telemetry/product/__init__.py:93

pkgs/python/[email protected]/chromadb/utils/embedding_functions/onnx_mini_lm_l6_v2.py:24

pkgs/python/[email protected]/chromadb/utils/embedding_functions/onnx_mini_lm_l6_v2.py:109

pkgs/python/[email protected]/chromadb/utils/embedding_functions/schemas/registry.py:38

pkgs/python/[email protected]/chromadb/utils/embedding_functions/schemas/schema_utils.py:36

low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations

pkgs/python/[email protected]/chromadb/cli/cli.py:25

pkgs/python/[email protected]/chromadb/utils/embedding_functions/together_ai_embedding_function.py:89

redis

python dependency

medium telemetry dependency Excluded from app score #440419c51f120146 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/redis/asyncio/observability/recorder.py:247

        from opentelemetry.metrics import Observation

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d632136cce689911 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/redis/observability/metrics.py:37

    from opentelemetry.metrics import Meter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d61d7691d22930f8 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/redis/observability/providers.py:32

    from opentelemetry.sdk.metrics import MeterProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f75f803df0def5fc capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/redis/observability/providers.py:76

            from opentelemetry import metrics

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #411f7ba3adce36c9 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/redis/observability/providers.py:77

            from opentelemetry.metrics import NoOpMeterProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e64260955e7b1e7d capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/redis/observability/recorder.py:242

        from opentelemetry.metrics import Observation

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #634cc2dc5c205287 capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/redis/observability/recorder.py:727

    from opentelemetry.metrics import Observation

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #902990dd96a71e5b capability detected · no path traced — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/redis/observability/registry.py:8

        from opentelemetry.metrics import Observation

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 6 low-confidence finding(s)

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 4 locations

pkgs/python/[email protected]/redis/asyncio/multidb/healthcheck.py:505

pkgs/python/[email protected]/redis/http/http_client.py:309

pkgs/python/[email protected]/redis/ocsp.py:272

pkgs/python/[email protected]/redis/ocsp.py:285

low env_fs — Filesystem access. 2 locations

pkgs/python/[email protected]/redis/commands/json/__init__.py:303

pkgs/python/[email protected]/redis/commands/json/commands.py:650

azure-identity

python dependency

medium pii_flow dependency Excluded from app score #fc05ace3c22f7aa2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:99 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/azure/identity/_credentials/environment.py:66 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/azure/identity/_credentials/environment.py:99

            _LOGGER.info("Environment is configured for %s", self._credential.__class__.__name__)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1b7504c8ab8f4f42 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:77 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:60 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:77

            _LOGGER.info("Environment is configured for %s", self._credential.__class__.__name__)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 105 low-confidence finding(s)

low env_fs — Environment-variable access. 101 locations

pkgs/python/[email protected]/azure/identity/_credentials/app_service.py:22

pkgs/python/[email protected]/azure/identity/_credentials/app_service.py:23

pkgs/python/[email protected]/azure/identity/_credentials/azd_cli.py:239

pkgs/python/[email protected]/azure/identity/_credentials/azd_cli.py:322

pkgs/python/[email protected]/azure/identity/_credentials/azure_arc.py:74

pkgs/python/[email protected]/azure/identity/_credentials/azure_cli.py:240

pkgs/python/[email protected]/azure/identity/_credentials/azure_cli.py:278

pkgs/python/[email protected]/azure/identity/_credentials/azure_ml.py:23

pkgs/python/[email protected]/azure/identity/_credentials/azure_ml.py:24

pkgs/python/[email protected]/azure/identity/_credentials/azure_pipelines.py:25

pkgs/python/[email protected]/azure/identity/_credentials/azure_pipelines.py:37

pkgs/python/[email protected]/azure/identity/_credentials/cloud_shell.py:34

pkgs/python/[email protected]/azure/identity/_credentials/default.py:154

pkgs/python/[email protected]/azure/identity/_credentials/default.py:158

pkgs/python/[email protected]/azure/identity/_credentials/default.py:162

pkgs/python/[email protected]/azure/identity/_credentials/default.py:166

pkgs/python/[email protected]/azure/identity/_credentials/default.py:169

pkgs/python/[email protected]/azure/identity/_credentials/default.py:171

pkgs/python/[email protected]/azure/identity/_credentials/default.py:176

pkgs/python/[email protected]/azure/identity/_credentials/default.py:268

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:63

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:65

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:66

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:67

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:70

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:72

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:73

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:74

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:75

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:77

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:81

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:83

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:84

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:85

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:86

pkgs/python/[email protected]/azure/identity/_credentials/environment.py:106

pkgs/python/[email protected]/azure/identity/_credentials/imds.py:60

pkgs/python/[email protected]/azure/identity/_credentials/imds.py:90

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:82

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:83

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:84

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:98

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:103

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:104

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:115

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:120

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:131

pkgs/python/[email protected]/azure/identity/_credentials/managed_identity.py:133

pkgs/python/[email protected]/azure/identity/_credentials/service_fabric.py:42

pkgs/python/[email protected]/azure/identity/_credentials/service_fabric.py:43

pkgs/python/[email protected]/azure/identity/_credentials/service_fabric.py:44

pkgs/python/[email protected]/azure/identity/_credentials/workload_identity.py:79

pkgs/python/[email protected]/azure/identity/_credentials/workload_identity.py:80

pkgs/python/[email protected]/azure/identity/_credentials/workload_identity.py:81

pkgs/python/[email protected]/azure/identity/_internal/msal_credentials.py:39

pkgs/python/[email protected]/azure/identity/_internal/utils.py:90

pkgs/python/[email protected]/azure/identity/_internal/utils.py:151

pkgs/python/[email protected]/azure/identity/_internal/utils.py:207

pkgs/python/[email protected]/azure/identity/_persistent_cache.py:88

pkgs/python/[email protected]/azure/identity/_persistent_cache.py:89

pkgs/python/[email protected]/azure/identity/aio/_credentials/azd_cli.py:221

pkgs/python/[email protected]/azure/identity/aio/_credentials/azure_arc.py:19

pkgs/python/[email protected]/azure/identity/aio/_credentials/azure_arc.py:20

pkgs/python/[email protected]/azure/identity/aio/_credentials/azure_cli.py:226

pkgs/python/[email protected]/azure/identity/aio/_credentials/cloud_shell.py:21

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:135

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:137

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:141

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:145

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:150

pkgs/python/[email protected]/azure/identity/aio/_credentials/default.py:231

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:57

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:59

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:60

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:61

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:64

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:66

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:67

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:68

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:69

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:71

pkgs/python/[email protected]/azure/identity/aio/_credentials/environment.py:80

pkgs/python/[email protected]/azure/identity/aio/_credentials/imds.py:54

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:54

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:55

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:56

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:70

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:75

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:76

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:87

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:92

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:103

pkgs/python/[email protected]/azure/identity/aio/_credentials/managed_identity.py:105

pkgs/python/[email protected]/azure/identity/aio/_credentials/workload_identity.py:57

pkgs/python/[email protected]/azure/identity/aio/_credentials/workload_identity.py:58

pkgs/python/[email protected]/azure/identity/aio/_credentials/workload_identity.py:59

pkgs/python/[email protected]/samples/control_interactive_prompts.py:17

pkgs/python/[email protected]/samples/credential_creation_code_snippets.py:360

pkgs/python/[email protected]/samples/credential_creation_code_snippets.py:374

pkgs/python/[email protected]/samples/key_vault_cert.py:19

pkgs/python/[email protected]/samples/user_authentication.py:14

low env_fs — Filesystem access. 4 locations

pkgs/python/[email protected]/azure/identity/_credentials/azure_arc.py:52

pkgs/python/[email protected]/azure/identity/_credentials/certificate.py:149

pkgs/python/[email protected]/azure/identity/_credentials/vscode.py:50

pkgs/python/[email protected]/azure/identity/_credentials/workload_identity.py:33

databricks-sdk

python dependency

medium pii_flow dependency Excluded from app score #f8b03650dafdb6f7 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:343 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:340 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:343

        headers={"Authorization": f"Bearer {token.access_token}"},

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium pii_flow dependency Excluded from app score #f5c7dee423d14dce — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:23 · flow /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:21 → /tmp/closeopen-axxfv8ed/pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:23

        response = requests.get(endpoint, headers=headers)

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 60 low-confidence finding(s)

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 18 locations

pkgs/python/[email protected]/databricks/sdk/_base_client.py:284

pkgs/python/[email protected]/databricks/sdk/config.py:602

pkgs/python/[email protected]/databricks/sdk/config.py:698

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:341

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:1264

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:1018

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:1972

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:2080

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:2285

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:2300

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:2435

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:2452

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:2613

pkgs/python/[email protected]/databricks/sdk/oauth.py:209

pkgs/python/[email protected]/databricks/sdk/oauth.py:548

pkgs/python/[email protected]/databricks/sdk/oauth.py:916

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:23

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:93

low env_fs — Environment-variable access. 30 locations

pkgs/python/[email protected]/databricks/sdk/config.py:565

pkgs/python/[email protected]/databricks/sdk/config.py:569

pkgs/python/[email protected]/databricks/sdk/config.py:731

pkgs/python/[email protected]/databricks/sdk/config.py:734

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:159

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:203

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:538

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:1195

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:1329

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:1330

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:1379

pkgs/python/[email protected]/databricks/sdk/dbutils.py:276

pkgs/python/[email protected]/databricks/sdk/oidc.py:78

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:17

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:21

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:22

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:46

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:47

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:48

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:49

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:50

pkgs/python/[email protected]/databricks/sdk/oidc_token_supplier.py:51

pkgs/python/[email protected]/databricks/sdk/useragent.py:119

pkgs/python/[email protected]/databricks/sdk/useragent.py:120

pkgs/python/[email protected]/databricks/sdk/useragent.py:128

pkgs/python/[email protected]/databricks/sdk/useragent.py:129

pkgs/python/[email protected]/databricks/sdk/useragent.py:222

pkgs/python/[email protected]/databricks/sdk/useragent.py:312

pkgs/python/[email protected]/databricks/sdk/useragent.py:332

pkgs/python/[email protected]/databricks/sdk/useragent.py:362

low env_fs — Filesystem access. 12 locations

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:593

pkgs/python/[email protected]/databricks/sdk/credentials_provider.py:1343

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:1166

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:1205

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:1506

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:1655

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:1670

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:1695

pkgs/python/[email protected]/databricks/sdk/mixins/files.py:1884

pkgs/python/[email protected]/databricks/sdk/oauth.py:980

pkgs/python/[email protected]/databricks/sdk/oauth.py:997

pkgs/python/[email protected]/databricks/sdk/oidc.py:114

@upstash/vector

python dependency

expand_more 1 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #32e217b9037710c5 capability detected · no path traced — Environment-variable access.

pkgs/python/@[email protected]__reposrc/.github/scripts/npm_retention.py:11

NPM_TOKEN = os.environ.get("NPM_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

boto3

python dependency

expand_more 4 low-confidence finding(s)

low env_fs — Filesystem access. 4 locations

pkgs/python/[email protected]/boto3/docs/__init__.py:50

pkgs/python/[email protected]/boto3/docs/service.py:200

pkgs/python/[email protected]/setup.py:24

pkgs/python/[email protected]/setup.py:32

cassandra-driver

python dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #682acc19c3ada3fe capability detected · no path traced — Environment-variable access.

pkgs/python/[email protected]/cassandra/cqlengine/management.py:544

    if not os.getenv(CQLENG_ALLOW_SCHEMA_MANAGEMENT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs — Filesystem access. 2 locations

pkgs/python/[email protected]/cassandra/datastax/cloud/__init__.py:113

pkgs/python/[email protected]/setup.py:66

low egress dependency Excluded from app score #3be97889b2dac3c1 capability detected · no path traced — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/cassandra/datastax/cloud/__init__.py:139

        response = urlopen(url, context=config.ssl_context, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

httpx

python dependency

expand_more 4 low-confidence finding(s)

low env_fs — Environment-variable access. 4 locations

pkgs/python/[email protected]/httpx/_config.py:34

pkgs/python/[email protected]/httpx/_config.py:35

pkgs/python/[email protected]/httpx/_config.py:36

pkgs/python/[email protected]/httpx/_config.py:37

openai

python dependency

expand_more 69 low-confidence finding(s)

low env_fs — Filesystem access. 16 locations

pkgs/python/[email protected]/examples/image_stream.py:30

pkgs/python/[email protected]/examples/image_stream.py:41

pkgs/python/[email protected]/examples/uploads.py:30

pkgs/python/[email protected]/src/openai/_files.py:69

pkgs/python/[email protected]/src/openai/_files.py:81

pkgs/python/[email protected]/src/openai/_files.py:111

pkgs/python/[email protected]/src/openai/_files.py:123

pkgs/python/[email protected]/src/openai/_legacy_response.py:443

pkgs/python/[email protected]/src/openai/_legacy_response.py:456

pkgs/python/[email protected]/src/openai/_response.py:515

pkgs/python/[email protected]/src/openai/_response.py:557

pkgs/python/[email protected]/src/openai/_utils/_transform.py:248

pkgs/python/[email protected]/src/openai/_utils/_transform.py:414

pkgs/python/[email protected]/src/openai/_utils/_utils.py:383

pkgs/python/[email protected]/src/openai/auth/_workload.py:59

pkgs/python/[email protected]/src/openai/lib/_validators.py:485

low env_fs — Environment-variable access. 47 locations

pkgs/python/[email protected]/examples/realtime/azure_realtime.py:31

pkgs/python/[email protected]/examples/realtime/azure_realtime.py:37

pkgs/python/[email protected]/src/openai/__init__.py:161

pkgs/python/[email protected]/src/openai/__init__.py:163

pkgs/python/[email protected]/src/openai/__init__.py:165

pkgs/python/[email protected]/src/openai/__init__.py:167

pkgs/python/[email protected]/src/openai/__init__.py:341

pkgs/python/[email protected]/src/openai/__init__.py:345

pkgs/python/[email protected]/src/openai/__init__.py:350

pkgs/python/[email protected]/src/openai/__init__.py:366

pkgs/python/[email protected]/src/openai/__init__.py:369

pkgs/python/[email protected]/src/openai/__init__.py:372

pkgs/python/[email protected]/src/openai/__init__.py:382

pkgs/python/[email protected]/src/openai/_client.py:208

pkgs/python/[email protected]/src/openai/_client.py:218

pkgs/python/[email protected]/src/openai/_client.py:234

pkgs/python/[email protected]/src/openai/_client.py:238

pkgs/python/[email protected]/src/openai/_client.py:242

pkgs/python/[email protected]/src/openai/_client.py:250

pkgs/python/[email protected]/src/openai/_client.py:254

pkgs/python/[email protected]/src/openai/_client.py:808

pkgs/python/[email protected]/src/openai/_client.py:818

pkgs/python/[email protected]/src/openai/_client.py:834

pkgs/python/[email protected]/src/openai/_client.py:838

pkgs/python/[email protected]/src/openai/_client.py:842

pkgs/python/[email protected]/src/openai/_client.py:850

pkgs/python/[email protected]/src/openai/_client.py:854

pkgs/python/[email protected]/src/openai/_models.py:129

pkgs/python/[email protected]/src/openai/_utils/_logs.py:23

pkgs/python/[email protected]/src/openai/lib/_bedrock_auth.py:172

pkgs/python/[email protected]/src/openai/lib/azure.py:215

pkgs/python/[email protected]/src/openai/lib/azure.py:218

pkgs/python/[email protected]/src/openai/lib/azure.py:226

pkgs/python/[email protected]/src/openai/lib/azure.py:240

pkgs/python/[email protected]/src/openai/lib/azure.py:539

pkgs/python/[email protected]/src/openai/lib/azure.py:542

pkgs/python/[email protected]/src/openai/lib/azure.py:550

pkgs/python/[email protected]/src/openai/lib/azure.py:564

pkgs/python/[email protected]/src/openai/lib/bedrock.py:70

pkgs/python/[email protected]/src/openai/lib/bedrock.py:80

pkgs/python/[email protected]/src/openai/lib/bedrock.py:105

pkgs/python/[email protected]/src/openai/lib/bedrock.py:150

pkgs/python/[email protected]/src/openai/providers/bedrock.py:249

pkgs/python/[email protected]/src/openai/providers/bedrock.py:332

pkgs/python/[email protected]/src/openai/providers/bedrock.py:339

pkgs/python/[email protected]/src/openai/providers/bedrock.py:392

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations

pkgs/python/[email protected]/src/openai/_base_client.py:319

pkgs/python/[email protected]/src/openai/auth/_workload.py:253

low egress — Hardcoded external endpoint. Review what data is sent to this destination. 4 locations

pkgs/python/[email protected]/src/openai/auth/_workload.py:107

pkgs/python/[email protected]/src/openai/auth/_workload.py:110

pkgs/python/[email protected]/src/openai/auth/_workload.py:154

pkgs/python/[email protected]/src/openai/auth/_workload.py:157

pinecone

python dependency

expand_more 94 low-confidence finding(s)

low env_fs — Environment-variable access. 17 locations

pkgs/python/[email protected]/pinecone/__init__.py:212

pkgs/python/[email protected]/pinecone/_internal/config.py:60

pkgs/python/[email protected]/pinecone/_internal/config.py:159

pkgs/python/[email protected]/pinecone/_internal/config.py:162

pkgs/python/[email protected]/pinecone/_internal/http_client.py:109

pkgs/python/[email protected]/pinecone/_internal/http_client.py:535

pkgs/python/[email protected]/pinecone/admin/admin.py:103

pkgs/python/[email protected]/pinecone/admin/admin.py:104

pkgs/python/[email protected]/pinecone/async_client/assistants.py:85

pkgs/python/[email protected]/pinecone/async_client/assistants.py:105

pkgs/python/[email protected]/pinecone/async_client/async_index.py:103

pkgs/python/[email protected]/pinecone/client/assistants.py:82

pkgs/python/[email protected]/pinecone/client/assistants.py:102

pkgs/python/[email protected]/pinecone/config/pinecone_config.py:32

pkgs/python/[email protected]/pinecone/config/pinecone_config.py:75

pkgs/python/[email protected]/pinecone/grpc/__init__.py:201

pkgs/python/[email protected]/pinecone/index/__init__.py:112

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 75 locations

pkgs/python/[email protected]/pinecone/_client.py:529

pkgs/python/[email protected]/pinecone/_internal/http_client.py:515

pkgs/python/[email protected]/pinecone/_internal/http_client.py:619

pkgs/python/[email protected]/pinecone/_internal/http_client.py:772

pkgs/python/[email protected]/pinecone/_internal/http_client.py:788

pkgs/python/[email protected]/pinecone/admin/admin.py:194

pkgs/python/[email protected]/pinecone/admin/api_keys.py:79

pkgs/python/[email protected]/pinecone/admin/api_keys.py:134

pkgs/python/[email protected]/pinecone/admin/api_keys.py:161

pkgs/python/[email protected]/pinecone/admin/organizations.py:82

pkgs/python/[email protected]/pinecone/admin/projects.py:141

pkgs/python/[email protected]/pinecone/async_client/assistants.py:325

pkgs/python/[email protected]/pinecone/async_client/assistants.py:639

pkgs/python/[email protected]/pinecone/async_client/assistants.py:714

pkgs/python/[email protected]/pinecone/async_client/assistants.py:781

pkgs/python/[email protected]/pinecone/async_client/assistants.py:854

pkgs/python/[email protected]/pinecone/async_client/assistants.py:980

pkgs/python/[email protected]/pinecone/async_client/assistants.py:995

pkgs/python/[email protected]/pinecone/async_client/assistants.py:1173

pkgs/python/[email protected]/pinecone/async_client/assistants.py:1295

pkgs/python/[email protected]/pinecone/async_client/assistants.py:1448

pkgs/python/[email protected]/pinecone/async_client/assistants.py:1543

pkgs/python/[email protected]/pinecone/async_client/async_index.py:224

pkgs/python/[email protected]/pinecone/async_client/async_index.py:1063

pkgs/python/[email protected]/pinecone/async_client/async_index.py:1327

pkgs/python/[email protected]/pinecone/async_client/async_index.py:1588

pkgs/python/[email protected]/pinecone/async_client/backups.py:97

pkgs/python/[email protected]/pinecone/async_client/backups.py:157

pkgs/python/[email protected]/pinecone/async_client/backups.py:188

pkgs/python/[email protected]/pinecone/async_client/collections.py:127

pkgs/python/[email protected]/pinecone/async_client/indexes.py:128

pkgs/python/[email protected]/pinecone/async_client/inference.py:400

pkgs/python/[email protected]/pinecone/async_client/pinecone.py:431

pkgs/python/[email protected]/pinecone/async_client/restore_jobs.py:122

pkgs/python/[email protected]/pinecone/client/assistants.py:237

pkgs/python/[email protected]/pinecone/client/assistants.py:354

pkgs/python/[email protected]/pinecone/client/assistants.py:367

pkgs/python/[email protected]/pinecone/client/assistants.py:398

pkgs/python/[email protected]/pinecone/client/assistants.py:450

pkgs/python/[email protected]/pinecone/client/assistants.py:566

pkgs/python/[email protected]/pinecone/client/assistants.py:783

pkgs/python/[email protected]/pinecone/client/assistants.py:1139

pkgs/python/[email protected]/pinecone/client/assistants.py:1251

pkgs/python/[email protected]/pinecone/client/assistants.py:1343

pkgs/python/[email protected]/pinecone/client/assistants.py:1482

pkgs/python/[email protected]/pinecone/client/backups.py:87

pkgs/python/[email protected]/pinecone/client/backups.py:137

pkgs/python/[email protected]/pinecone/client/backups.py:165

pkgs/python/[email protected]/pinecone/client/collections.py:125

pkgs/python/[email protected]/pinecone/client/indexes.py:124

pkgs/python/[email protected]/pinecone/client/inference.py:409

pkgs/python/[email protected]/pinecone/client/restore_jobs.py:111

pkgs/python/[email protected]/pinecone/grpc/__init__.py:1388

pkgs/python/[email protected]/pinecone/grpc/__init__.py:1512

pkgs/python/[email protected]/pinecone/grpc/__init__.py:1872

pkgs/python/[email protected]/pinecone/index/__init__.py:550

pkgs/python/[email protected]/pinecone/index/__init__.py:1210

pkgs/python/[email protected]/pinecone/index/__init__.py:1341

pkgs/python/[email protected]/pinecone/index/__init__.py:1689

pkgs/python/[email protected]/pinecone/preview/async_documents.py:220

pkgs/python/[email protected]/pinecone/preview/async_documents.py:401

pkgs/python/[email protected]/pinecone/preview/async_documents.py:465

pkgs/python/[email protected]/pinecone/preview/async_documents.py:536

pkgs/python/[email protected]/pinecone/preview/async_indexes.py:395

pkgs/python/[email protected]/pinecone/preview/async_indexes.py:622

pkgs/python/[email protected]/pinecone/preview/async_indexes.py:688

pkgs/python/[email protected]/pinecone/preview/async_indexes.py:730

pkgs/python/[email protected]/pinecone/preview/documents.py:202

pkgs/python/[email protected]/pinecone/preview/documents.py:376

pkgs/python/[email protected]/pinecone/preview/documents.py:436

pkgs/python/[email protected]/pinecone/preview/documents.py:501

pkgs/python/[email protected]/pinecone/preview/indexes.py:378

pkgs/python/[email protected]/pinecone/preview/indexes.py:609

pkgs/python/[email protected]/pinecone/preview/indexes.py:674

pkgs/python/[email protected]/pinecone/preview/indexes.py:716

low env_fs — Filesystem access. 2 locations

pkgs/python/[email protected]/pinecone/async_client/assistants.py:948

pkgs/python/[email protected]/pinecone/client/assistants.py:320

pinecone-text

python dependency

expand_more 6 low-confidence finding(s)

low env_fs dependency Excluded from app score #04f167eba9802779 capability detected · no path traced — Environment-variable access.

pkgs/python/[email protected]/pinecone_text/dense/jina_encoder.py:30

            api_key = os.environ.get("JINA_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #36d16b3f7145a893 capability detected · no path traced — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/pinecone_text/dense/jina_encoder.py:69

        resp = self._session.post(  # type: ignore
            JINA_API_URL, json={"input": texts_input, "model": self._model_name}
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs — Filesystem access. 3 locations

pkgs/python/[email protected]/pinecone_text/sparse/bm25_encoder.py:170

pkgs/python/[email protected]/pinecone_text/sparse/bm25_encoder.py:180

pkgs/python/[email protected]/pinecone_text/sparse/bm25_encoder.py:263

low egress dependency Excluded from app score #a309043206884a2e capability detected · no path traced — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/pinecone_text/sparse/bm25_encoder.py:261

            response = requests.get(url, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

protobuf

python dependency

expand_more 3 low-confidence finding(s)

low env_fs — Environment-variable access. 2 locations

pkgs/python/[email protected]/google/protobuf/internal/api_implementation.py:65

pkgs/python/[email protected]/google/protobuf/runtime_version.py:71

low env_fs dependency Excluded from app score #d297b879deedbacf capability detected · no path traced — Filesystem access.

pkgs/python/[email protected]/setup.py:28

  with open(os.path.join('google', 'protobuf', '__init__.py')) as version_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

psycopg

python dependency

expand_more 9 low-confidence finding(s)

low env_fs — Environment-variable access. 7 locations

pkgs/python/[email protected]/psycopg/_conninfo_utils.py:81

pkgs/python/[email protected]/psycopg/_dns.py:138

pkgs/python/[email protected]/psycopg/_dns.py:141

pkgs/python/[email protected]/psycopg/_dns.py:143

pkgs/python/[email protected]/psycopg/pq/__init__.py:61

pkgs/python/[email protected]/psycopg/waiting.py:437

pkgs/python/[email protected]/psycopg/waiting.py:438

low env_fs — Filesystem access. 2 locations

pkgs/python/[email protected]/psycopg/pq/_pq_ctypes.py:807

pkgs/python/[email protected]/psycopg/pq/_pq_ctypes.py:838

pydantic

python dependency

expand_more 9 low-confidence finding(s)

low env_fs — Filesystem access. 5 locations

pkgs/python/[email protected]/pydantic/deprecated/parse.py:71

pkgs/python/[email protected]/pydantic/mypy.py:1411

pkgs/python/[email protected]/pydantic/v1/env_settings.py:307

pkgs/python/[email protected]/pydantic/v1/mypy.py:948

pkgs/python/[email protected]/pydantic/v1/parse.py:57

low env_fs — Environment-variable access. 4 locations

pkgs/python/[email protected]/pydantic/json_schema.py:344

pkgs/python/[email protected]/pydantic/plugin/_loader.py:27

pkgs/python/[email protected]/pydantic/v1/env_settings.py:173

pkgs/python/[email protected]/pydantic/v1/env_settings.py:175

pymochow

python dependency

expand_more 2 low-confidence finding(s)

low egress dependency Excluded from app score #51a9e51871fa7d0e capability detected · no path traced — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/pymochow/http/http_client.py:220

                    http_response = self.session.post(url, data=body,
                            params=params,
                            headers=headers,
                            timeout=timeout_in_s)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #8c441a81c720f6ea capability detected · no path traced — Filesystem access.

pkgs/python/[email protected]/setup.py:19

with io.open(os.path.join("pymochow", "__init__.py"), "rt", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pymongo

python dependency

expand_more 117 low-confidence finding(s)

low env_fs — Filesystem access. 20 locations

pkgs/python/[email protected]/.evergreen/scripts/generate_config_utils.py:292

pkgs/python/[email protected]/.evergreen/scripts/generate_config_utils.py:321

pkgs/python/[email protected]/.evergreen/scripts/generate_config_utils.py:354

pkgs/python/[email protected]/.evergreen/scripts/mod_wsgi_tester.py:64

pkgs/python/[email protected]/.evergreen/scripts/mod_wsgi_tester.py:81

pkgs/python/[email protected]/.evergreen/scripts/resync-all-specs.py:126

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:53

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:68

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:65

pkgs/python/[email protected]/pymongo/auth_oidc_shared.py:86

pkgs/python/[email protected]/pymongo/auth_oidc_shared.py:97

pkgs/python/[email protected]/pymongo/auth_oidc_shared.py:131

pkgs/python/[email protected]/pymongo/common.py:238

pkgs/python/[email protected]/pymongo/daemon.py:64

pkgs/python/[email protected]/pymongo/daemon.py:95

pkgs/python/[email protected]/tools/compare_import_time.py:23

pkgs/python/[email protected]/tools/convert_test_to_async.py:123

pkgs/python/[email protected]/tools/convert_test_to_async.py:127

pkgs/python/[email protected]/tools/ensure_future_annotations_import.py:29

pkgs/python/[email protected]/tools/synchro.py:290

low env_fs — Environment-variable access. 92 locations

pkgs/python/[email protected]/.evergreen/scripts/kms_tester.py:64

pkgs/python/[email protected]/.evergreen/scripts/kms_tester.py:99

pkgs/python/[email protected]/.evergreen/scripts/kms_tester.py:102

pkgs/python/[email protected]/.evergreen/scripts/kms_tester.py:106

pkgs/python/[email protected]/.evergreen/scripts/kms_tester.py:128

pkgs/python/[email protected]/.evergreen/scripts/kms_tester.py:129

pkgs/python/[email protected]/.evergreen/scripts/mod_wsgi_tester.py:26

pkgs/python/[email protected]/.evergreen/scripts/mod_wsgi_tester.py:72

pkgs/python/[email protected]/.evergreen/scripts/mod_wsgi_tester.py:73

pkgs/python/[email protected]/.evergreen/scripts/mod_wsgi_tester.py:86

pkgs/python/[email protected]/.evergreen/scripts/mod_wsgi_tester.py:87

pkgs/python/[email protected]/.evergreen/scripts/oidc_tester.py:34

pkgs/python/[email protected]/.evergreen/scripts/oidc_tester.py:36

pkgs/python/[email protected]/.evergreen/scripts/oidc_tester.py:39

pkgs/python/[email protected]/.evergreen/scripts/oidc_tester.py:40

pkgs/python/[email protected]/.evergreen/scripts/oidc_tester.py:62

pkgs/python/[email protected]/.evergreen/scripts/oidc_tester.py:84

pkgs/python/[email protected]/.evergreen/scripts/resync-all-specs.py:63

pkgs/python/[email protected]/.evergreen/scripts/run_server.py:10

pkgs/python/[email protected]/.evergreen/scripts/run_server.py:22

pkgs/python/[email protected]/.evergreen/scripts/run_server.py:23

pkgs/python/[email protected]/.evergreen/scripts/run_server.py:32

pkgs/python/[email protected]/.evergreen/scripts/run_server.py:33

pkgs/python/[email protected]/.evergreen/scripts/run_server.py:35

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:24

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:25

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:26

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:27

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:28

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:29

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:30

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:31

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:106

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:150

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:153

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:204

pkgs/python/[email protected]/.evergreen/scripts/run_tests.py:207

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:57

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:111

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:181

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:200

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:223

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:225

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:226

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:268

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:281

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:284

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:304

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:306

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:309

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:310

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:321

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:328

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:349

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:412

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:472

pkgs/python/[email protected]/.evergreen/scripts/teardown_tests.py:10

pkgs/python/[email protected]/.evergreen/scripts/teardown_tests.py:11

pkgs/python/[email protected]/.evergreen/scripts/teardown_tests.py:52

pkgs/python/[email protected]/.evergreen/scripts/teardown_tests.py:61

pkgs/python/[email protected]/.evergreen/scripts/utils.py:15

pkgs/python/[email protected]/.evergreen/scripts/utils.py:169

pkgs/python/[email protected]/.evergreen/scripts/utils.py:173

pkgs/python/[email protected]/.evergreen/scripts/utils.py:175

pkgs/python/[email protected]/.evergreen/scripts/utils.py:178

pkgs/python/[email protected]/.evergreen/scripts/utils.py:181

pkgs/python/[email protected]/.evergreen/scripts/utils.py:211

pkgs/python/[email protected]/_setup.py:71

pkgs/python/[email protected]/_setup.py:88

pkgs/python/[email protected]/_setup.py:89

pkgs/python/[email protected]/_setup.py:94

pkgs/python/[email protected]/_setup.py:127

pkgs/python/[email protected]/pymongo/auth_oidc_shared.py:81

pkgs/python/[email protected]/pymongo/auth_oidc_shared.py:92

pkgs/python/[email protected]/pymongo/auth_oidc_shared.py:129

pkgs/python/[email protected]/pymongo/auth_oidc_shared.py:130

pkgs/python/[email protected]/pymongo/logger.py:165

pkgs/python/[email protected]/pymongo/pool_options.py:78

pkgs/python/[email protected]/pymongo/pool_options.py:119

pkgs/python/[email protected]/pymongo/pool_options.py:126

pkgs/python/[email protected]/pymongo/pool_options.py:128

pkgs/python/[email protected]/pymongo/pool_options.py:135

pkgs/python/[email protected]/pymongo/pool_options.py:139

pkgs/python/[email protected]/pymongo/pool_options.py:143

pkgs/python/[email protected]/pymongo/pool_options.py:152

pkgs/python/[email protected]/pymongo/pool_options.py:171

pkgs/python/[email protected]/pymongo/pool_options.py:181

pkgs/python/[email protected]/pymongo/pool_options.py:192

pkgs/python/[email protected]/tools/synchro.py:442

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations

pkgs/python/[email protected]/.evergreen/scripts/mod_wsgi_tester.py:17

pkgs/python/[email protected]/.evergreen/scripts/setup_tests.py:116

pkgs/python/[email protected]/pymongo/_azure_helpers.py:36

pkgs/python/[email protected]/pymongo/_gcp_helpers.py:29

pkgs/python/[email protected]/pymongo/ocsp_support.py:295

pymysql

python dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #1ea98d70d6771813 capability detected · no path traced — Filesystem access.

pkgs/python/[email protected]/pymysql/connections.py:1460

            with open(self.filename, "rb") as open_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pytz

python dependency

expand_more 6 low-confidence finding(s)

low env_fs — Environment-variable access. 2 locations

pkgs/python/[email protected]/pytz/__init__.py:91

pkgs/python/[email protected]/pytz/__init__.py:124

low env_fs — Filesystem access. 4 locations

pkgs/python/[email protected]/pytz/__init__.py:118

pkgs/python/[email protected]/pytz/tzfile.py:132

pkgs/python/[email protected]/pytz/tzfile.py:134

pkgs/python/[email protected]/setup.py:31

qdrant-client

python dependency

expand_more 13 low-confidence finding(s)

low egress dependency Excluded from app score #a89500d94645ad02 capability detected · no path traced — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/qdrant_client/common/version_check.py:15

    response = httpx.get(rest_uri, headers=rest_headers, auth=auth_provider, timeout=timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs — Filesystem access. 12 locations

pkgs/python/[email protected]/qdrant_client/embed/schema_parser.py:298

pkgs/python/[email protected]/qdrant_client/embed/utils.py:76

pkgs/python/[email protected]/qdrant_client/local/async_qdrant_local.py:99

pkgs/python/[email protected]/qdrant_client/local/async_qdrant_local.py:102

pkgs/python/[email protected]/qdrant_client/local/async_qdrant_local.py:125

pkgs/python/[email protected]/qdrant_client/local/async_qdrant_local.py:127

pkgs/python/[email protected]/qdrant_client/local/async_qdrant_local.py:146

pkgs/python/[email protected]/qdrant_client/local/qdrant_local.py:102

pkgs/python/[email protected]/qdrant_client/local/qdrant_local.py:105

pkgs/python/[email protected]/qdrant_client/local/qdrant_local.py:136

pkgs/python/[email protected]/qdrant_client/local/qdrant_local.py:138

pkgs/python/[email protected]/qdrant_client/local/qdrant_local.py:162

redisvl

python dependency

expand_more 39 low-confidence finding(s)

low env_fs — Filesystem access. 22 locations

pkgs/python/[email protected]/docs/_extension/gallery_directive.py:69

pkgs/python/[email protected]/doctests/query_vector.py:27

pkgs/python/[email protected]/redisvl/extensions/router/semantic.py:700

pkgs/python/[email protected]/redisvl/extensions/router/semantic.py:731

pkgs/python/[email protected]/redisvl/migration/backup.py:127

pkgs/python/[email protected]/redisvl/migration/backup.py:175

pkgs/python/[email protected]/redisvl/migration/backup.py:268

pkgs/python/[email protected]/redisvl/migration/backup.py:377

pkgs/python/[email protected]/redisvl/migration/batch_executor.py:342

pkgs/python/[email protected]/redisvl/migration/batch_executor.py:352

pkgs/python/[email protected]/redisvl/migration/batch_executor.py:361

pkgs/python/[email protected]/redisvl/migration/batch_planner.py:159

pkgs/python/[email protected]/redisvl/migration/batch_planner.py:361

pkgs/python/[email protected]/redisvl/migration/planner.py:243

pkgs/python/[email protected]/redisvl/migration/planner.py:646

pkgs/python/[email protected]/redisvl/migration/utils.py:44

pkgs/python/[email protected]/redisvl/migration/utils.py:50

pkgs/python/[email protected]/redisvl/schema/schema.py:260

pkgs/python/[email protected]/redisvl/schema/schema.py:496

pkgs/python/[email protected]/redisvl/utils/stopwords.py:15

pkgs/python/[email protected]/redisvl/utils/vectorize/base.py:569

pkgs/python/[email protected]/redisvl/utils/vectorize/bedrock.py:309

low env_fs — Environment-variable access. 17 locations

pkgs/python/[email protected]/redisvl/cli/utils.py:66

pkgs/python/[email protected]/redisvl/mcp/config.py:576

pkgs/python/[email protected]/redisvl/redis/connection.py:195

pkgs/python/[email protected]/redisvl/utils/rerank/cohere.py:93

pkgs/python/[email protected]/redisvl/utils/rerank/voyageai.py:92

pkgs/python/[email protected]/redisvl/utils/vectorize/bedrock.py:160

pkgs/python/[email protected]/redisvl/utils/vectorize/bedrock.py:163

pkgs/python/[email protected]/redisvl/utils/vectorize/bedrock.py:165

pkgs/python/[email protected]/redisvl/utils/vectorize/text/azureopenai.py:148

pkgs/python/[email protected]/redisvl/utils/vectorize/text/azureopenai.py:160

pkgs/python/[email protected]/redisvl/utils/vectorize/text/azureopenai.py:172

pkgs/python/[email protected]/redisvl/utils/vectorize/text/cohere.py:145

pkgs/python/[email protected]/redisvl/utils/vectorize/text/mistral.py:135

pkgs/python/[email protected]/redisvl/utils/vectorize/text/openai.py:134

pkgs/python/[email protected]/redisvl/utils/vectorize/vertexai.py:173

pkgs/python/[email protected]/redisvl/utils/vectorize/vertexai.py:176

pkgs/python/[email protected]/redisvl/utils/vectorize/voyageai.py:212

sqlalchemy

python dependency

expand_more 29 low-confidence finding(s)

low egress dependency Excluded from app score #80a487099aba226b capability detected · no path traced — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/python/[email protected]/lib/sqlalchemy/pool/impl.py:145

            self._pool.put(record, False)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs — Filesystem access. 19 locations

pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:42

pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:56

pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:146

pkgs/python/[email protected]/lib/sqlalchemy/testing/plugin/plugin_base.py:455

pkgs/python/[email protected]/lib/sqlalchemy/testing/profiling.py:200

pkgs/python/[email protected]/lib/sqlalchemy/testing/profiling.py:219

pkgs/python/[email protected]/lib/sqlalchemy/testing/provision.py:453

pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:134

pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:146

pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:162

pkgs/python/[email protected]/lib/sqlalchemy/util/tool_support.py:169

pkgs/python/[email protected]/tools/format_docs_code.py:155

pkgs/python/[email protected]/tools/format_docs_code.py:313

pkgs/python/[email protected]/tools/generate_proxy_methods.py:145

pkgs/python/[email protected]/tools/generate_proxy_methods.py:373

pkgs/python/[email protected]/tools/generate_sql_functions.py:38

pkgs/python/[email protected]/tools/generate_tuple_map_overloads.py:53

pkgs/python/[email protected]/tools/normalize_file_headers.py:27

pkgs/python/[email protected]/tools/sync_test_files.py:35

low env_fs — Environment-variable access. 9 locations

pkgs/python/[email protected]/lib/sqlalchemy/testing/fixtures/mypy.py:106

pkgs/python/[email protected]/lib/sqlalchemy/testing/plugin/plugin_base.py:398

pkgs/python/[email protected]/lib/sqlalchemy/testing/plugin/pytestplugin.py:880

pkgs/python/[email protected]/lib/sqlalchemy/util/_has_cy.py:27

pkgs/python/[email protected]/noxfile.py:95

pkgs/python/[email protected]/noxfile.py:106

pkgs/python/[email protected]/noxfile.py:269

pkgs/python/[email protected]/setup.py:23

pkgs/python/[email protected]/setup.py:24

upstash-vector

python dependency

expand_more 6 low-confidence finding(s)

low env_fs — Environment-variable access. 6 locations

pkgs/python/[email protected]/upstash_vector/client.py:74

pkgs/python/[email protected]/upstash_vector/client.py:75

pkgs/python/[email protected]/upstash_vector/client.py:142

pkgs/python/[email protected]/upstash_vector/client.py:143

pkgs/python/[email protected]/upstash_vector/http.py:22

pkgs/python/[email protected]/upstash_vector/http.py:24

valkey

python dependency

expand_more 4 low-confidence finding(s)

low env_fs — Filesystem access. 2 locations

pkgs/python/[email protected]/setup.py:7

pkgs/python/[email protected]/valkey/commands/json/commands.py:317

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations

pkgs/python/[email protected]/valkey/ocsp.py:271

pkgs/python/[email protected]/valkey/ocsp.py:284

vecs

python dependency

expand_more 2 low-confidence finding(s)

low env_fs — Filesystem access. 2 locations

pkgs/python/[email protected]/setup.py:29

pkgs/python/[email protected]/setup.py:40

weaviate-client

python dependency

expand_more 41 low-confidence finding(s)

low env_fs — Environment-variable access. 25 locations

pkgs/python/[email protected]/integration/conftest.py:358

pkgs/python/[email protected]/integration/conftest.py:405

pkgs/python/[email protected]/integration/test_auth.py:47

pkgs/python/[email protected]/integration/test_auth.py:101

pkgs/python/[email protected]/integration/test_auth.py:188

pkgs/python/[email protected]/integration/test_auth.py:207

pkgs/python/[email protected]/integration/test_client.py:700

pkgs/python/[email protected]/integration/test_client.py:707

pkgs/python/[email protected]/integration/test_collection_openai.py:584

pkgs/python/[email protected]/integration/test_collection_openai.py:750

pkgs/python/[email protected]/integration/test_collection_openai.py:794

pkgs/python/[email protected]/integration/test_collection_openai.py:837

pkgs/python/[email protected]/integration/test_collection_rerank.py:31

pkgs/python/[email protected]/integration/test_collection_rerank.py:85

pkgs/python/[email protected]/integration/test_collection_rerank.py:145

pkgs/python/[email protected]/integration/test_vectors.py:866

pkgs/python/[email protected]/weaviate/__init__.py:50

pkgs/python/[email protected]/weaviate/collections/batch/base.py:61

pkgs/python/[email protected]/weaviate/connect/base.py:202

pkgs/python/[email protected]/weaviate/connect/base.py:203

pkgs/python/[email protected]/weaviate/connect/base.py:204

pkgs/python/[email protected]/weaviate/embedded.py:38

pkgs/python/[email protected]/weaviate/embedded.py:39

pkgs/python/[email protected]/weaviate/embedded.py:205

pkgs/python/[email protected]/weaviate/logger.py:5

low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 9 locations

pkgs/python/[email protected]/integration/test_auth.py:26

pkgs/python/[email protected]/integration/test_auth.py:143

pkgs/python/[email protected]/integration/test_auth.py:149

pkgs/python/[email protected]/weaviate/connect/authentication.py:129

pkgs/python/[email protected]/weaviate/connect/authentication.py:137

pkgs/python/[email protected]/weaviate/connect/v4.py:408

pkgs/python/[email protected]/weaviate/connect/v4.py:423

pkgs/python/[email protected]/weaviate/connect/v4.py:753

pkgs/python/[email protected]/weaviate/connect/v4.py:762

low env_fs — Filesystem access. 6 locations

pkgs/python/[email protected]/profiling/test_shutdown.py:48

pkgs/python/[email protected]/profiling/test_sphere.py:33

pkgs/python/[email protected]/profiling/test_sphere.py:82

pkgs/python/[email protected]/tools/stubs.py:177

pkgs/python/[email protected]/weaviate/util.py:83

pkgs/python/[email protected]/weaviate/util.py:126

low egress dependency Excluded from app score #42290fed65ca4702 capability detected · no path traced — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/weaviate/embedded.py:91

            response = httpx.get("https://api.github.com/repos/weaviate/weaviate/releases/latest")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

Skipped dependencies

Production

next prod — tarball exceeds byte cap
@types/redis prod — no javascript source
input-otp prod — dist-only: no readable source
react-resizable-panels prod — dist-only: no readable source
partial-json prod — dist-only: no readable source
@opencode-ai/plugin prod — dist-only: no readable source
spacy prod — no sdist (wheels only)
faiss-cpu prod — no sdist (wheels only)
elasticsearch prod — scan budget exceeded
pymilvus prod — scan budget exceeded
langchain-aws prod — scan budget exceeded
oracledb prod — scan budget exceeded
groq prod — scan budget exceeded
together prod — scan budget exceeded
litellm prod — scan budget exceeded
ollama prod — scan budget exceeded
vertexai prod — scan budget exceeded
google-generativeai prod — scan budget exceeded
google-genai prod — scan budget exceeded
langchain prod — scan budget exceeded
langchain-community prod — scan budget exceeded
langchain-core prod — scan budget exceeded
sentence-transformers prod — scan budget exceeded
transformers prod — scan budget exceeded
opensearch-py prod — scan budget exceeded
fastembed prod — scan budget exceeded
typer prod — scan budget exceeded
rich prod — scan budget exceeded
mem0ai prod — scan budget exceeded

verified_user No application data leak found

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Application data flows

</> First-Party Code

first-party (python)

first-party (python): cli/python

first-party (python): mem0/memory

first-party (npm): integrations/openclaw

</> Dependencies

posthog

azure-search-documents

chromadb

redis

azure-identity

databricks-sdk

@upstash/vector

boto3

cassandra-driver

httpx

openai

pinecone

pinecone-text

protobuf

psycopg

pydantic

pymochow

pymongo

pymysql

pytz

qdrant-client

redisvl

sqlalchemy

upstash-vector

valkey

vecs

weaviate-client

Skipped dependencies