Close Open Privacy Scan

link https://github.com/coqui-ai/TTS
bolt Snapshot: commit dbf1a08
science engine v1.14
schedule 2026-07-16T22:09:47.335113+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code. Dependency data flows are listed separately and do not affect this verdict.

App Privacy Score

82 /100
Low privacy risk

Low risk · 1062 finding(s)

Dependency score: 42 (High risk)

bar_chart Score Breakdown

egress −15
env_fs −3

list Scan Summary

0 high 8 medium 1054 low
First-party packages: 1
Dependency packages: 30
Ecosystem: python

swap_horiz Application data flows

No application data flows were found. See dependency data flows below.

hub Dependency data flows (1)
medium transformers dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 → pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514

</> First-Party Code

first-party (python)

python first-party
expand_more 68 low-confidence finding(s)
low env_fs production #030f1c778cd7857f — Filesystem access.
repo/TTS/__init__.py:3 
with open(os.path.join(os.path.dirname(__file__), "VERSION"), "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac2112ce8f561c25 — Filesystem access.
repo/TTS/bin/compute_attention_masks.py:162 
        with open(metafile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c8d97879957ad6a — Filesystem access.
repo/TTS/bin/extract_tts_spectrograms.py:219 
    with open(os.path.join(output_path, metada_name), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a84273863a607806 — Filesystem access.
repo/TTS/bin/remove_silence_using_vad.py:70 
        with open(os.path.join(args.output_dir, "filtered_files.txt"), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f8ce1dbe6dfa38c6 — Filesystem access.
repo/TTS/demos/xtts_ft_demo/xtts_demo.py:75 
        self.log = open(self.log_file, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1dc27efba64e3e28 — Filesystem access.
repo/TTS/demos/xtts_ft_demo/xtts_demo.py:105 
    with open(sys.stdout.log_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5ad1f5d5e989a41 — Filesystem access.
repo/TTS/encoder/utils/prepare_voxceleb.py:97 
        with open(zip_filepath, "rb") as f_zip:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa9b5ade75538ae0 — Filesystem access.
repo/TTS/tts/datasets/__init__.py:153 
    with open(metafile_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16e9961a3192c299 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:21 
    with open(filepath, "r", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #055a7ac508672787 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:59 
    with open(filepath, "r", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af8a3eb26deaf085 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:100 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96267fca0e044bde — Filesystem access.
repo/TTS/tts/datasets/formatters.py:114 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1ac0bf0986f09c7 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:129 
    with open(txt_file, "r", encoding="ISO 8859-1") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2b61e411eefd501 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:173 
        with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bd21271522360a2 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:197 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1abbee50f349f323 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:211 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cccab9a34f1e1625 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:232 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #207d33ea6410e282 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:264 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0efb4a46405c8220 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:278 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #300a81635dd575f2 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:292 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26317914c77587a2 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:305 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1890c04e1c0343a6 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:334 
        with open(meta_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b84b643f4b70587b — Filesystem access.
repo/TTS/tts/datasets/formatters.py:364 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c542e0b420715f9 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:382 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93b3765f686a5b11 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:429 
        with open(meta_file, "r", encoding="utf-8") as file_text:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db439bc53ca3ebf3 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:456 
        with open(meta_file, "r", encoding="utf-8") as file_text:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f09d43a009afafc7 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:478 
            with open(txt_file, "r", encoding="utf-8") as file_text:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07bda4c12c31b80f — Filesystem access.
repo/TTS/tts/datasets/formatters.py:496 
        with open(meta_file, "r", encoding="utf-8") as file_text:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79c24f886b0d11f9 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:509 
    with open(os.path.join(root_path, meta_files), "r", encoding="utf-8") as meta:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ec747d252eb22eb — Filesystem access.
repo/TTS/tts/datasets/formatters.py:549 
        with open(str(meta_file), "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9245c2b02ca1977 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:566 
        with open(str(cache_to), "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdd0148d537b587e — Filesystem access.
repo/TTS/tts/datasets/formatters.py:571 
    with open(str(cache_to), "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bae6a5c69cc5e0d9 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:579 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0a2d81ba4ff7bf8 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:609 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #696b755ffa058447 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:622 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b2d8fc7ed4fe492 — Filesystem access.
repo/TTS/tts/datasets/formatters.py:636 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ca5f08b64ac42dc — Filesystem access.
repo/TTS/tts/datasets/formatters.py:649 
    with open(txt_file, "r", encoding="utf-8") as ttf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cb0b44d2a1cf27a — Filesystem access.
repo/TTS/tts/layers/bark/load_model.py:42 
    with open(fname, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9b107d5d235c973 — Filesystem access.
repo/TTS/tts/layers/bark/load_model.py:54 
    with open(to_local_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #101789864efc7c01 — Environment-variable access.
repo/TTS/tts/layers/tortoise/utils.py:7 
MODELS_DIR = os.environ.get("TORTOISE_MODELS_DIR", DEFAULT_MODELS_DIR)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f6c61e9bc3faf6c — Filesystem access.
repo/TTS/tts/layers/xtts/zh_num2words.py:1169 
    with open(args.ifile, "r", encoding="utf8") as istream, open(args.ofile, "w+", encoding="utf8") as ostream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87330209674970ca — Filesystem access.
repo/TTS/tts/models/vits.py:1748 
        with open(config_file, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24f8b8555daf8482 — Filesystem access.
repo/TTS/tts/models/vits.py:1994 
        with open(vocab_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30f7aa865c5096fc — Environment-variable access.
repo/TTS/tts/utils/text/belarusian/phonemizer.py:16 
        jar_path = os.environ["BEL_FANETYKA_JAR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c51724b80c1f076 — Filesystem access.
repo/TTS/tts/utils/text/cmudict.py:98 
            with open(file_or_path, encoding="latin-1") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #239757c7c159a4ad — Filesystem access.
repo/TTS/utils/download.py:95 
        with open(filepath, "rb") as file_obj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36e50a83128707ec — Filesystem access.
repo/TTS/utils/download.py:100 
    with open(filepath, mode) as fpointer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0477a6493a324b63 — Filesystem access.
repo/TTS/utils/download.py:104 
    with open(filepath, "rb") as file_obj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fd8c6b77f267826 — Environment-variable access.
repo/TTS/utils/generic_utils.py:128 
    TTS_HOME = os.environ.get("TTS_HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93707d0ec6ee0e64 — Environment-variable access.
repo/TTS/utils/generic_utils.py:129 
    XDG_DATA_HOME = os.environ.get("XDG_DATA_HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d17cbe9af57e4fe7 — Filesystem access.
repo/TTS/utils/manage.py:318 
            with open(tos_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12a34a350f477f10 — Environment-variable access.
repo/TTS/utils/manage.py:328 
            if os.path.exists(tos_path) or os.environ.get("COQUI_TOS_AGREED") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b45180c5ef4c922a — Filesystem access.
repo/TTS/utils/manage.py:392 
                    with open(md5sum_file, mode="r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e417ae31d261eca — Filesystem access.
repo/TTS/utils/manage.py:539 
            with open(temp_zip_name, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cc23c39526b7def — Filesystem access.
repo/TTS/utils/manage.py:574 
            with open(temp_tar_name, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46f03be304be62c5 — Filesystem access.
repo/TTS/utils/manage.py:606 
            with open(temp_zip_name, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d0a903034d65304 — Filesystem access.
repo/docs/source/conf.py:26 
with open("../../TTS/VERSION", "r") as ver:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6368ea9e4f3fe11f — Filesystem access.
repo/notebooks/dataset_analysis/analyze.py:46 
    with open(path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32381c8061c5408a — Filesystem access.
repo/notebooks/dataset_analysis/analyze.py:95 
    with open(file_path, "w+", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbf60487c648ef56 — Filesystem access.
repo/notebooks/dataset_analysis/analyze.py:159 
    with open(train_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cb418ffa92f3973d — Filesystem access.
repo/scripts/sync_readme.py:19 
    orig_content = readme_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef06232709579d15 — Filesystem access.
repo/scripts/sync_readme.py:27 
    readme_path.write_text(new_content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ca7ac6f746d1e0d — Filesystem access.
repo/setup.py:40 
with open(os.path.join(cwd, "TTS", "VERSION")) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #819d1a88425eb84a — Filesystem access.
repo/setup.py:62 
requirements = open(os.path.join(cwd, "requirements.txt"), "r").readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51a3c72eb5a497ce — Filesystem access.
repo/setup.py:63 
with open(os.path.join(cwd, "requirements.notebooks.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b96500b6768f35ee — Filesystem access.
repo/setup.py:65 
with open(os.path.join(cwd, "requirements.dev.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f37165290f19940 — Filesystem access.
repo/setup.py:67 
with open(os.path.join(cwd, "requirements.ja.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c10551e643ba9a1c — Filesystem access.
repo/setup.py:71 
with open("README.md", "r", encoding="utf-8") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

trainer

python dependency
medium telemetry dependency Excluded from app score #6abd07856016cc3c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:66 
        self.run.track(value, name=title, step=step, context=self.context)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a700baaa85b0f7f1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:69 
        self.run.track(
            Text(text),  # Pass a string you want to track
            name=title,  # The name of distributions
            step=step,  # Step index (optional)
            context=self.context,
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #cd567ce6a2510c09 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:77 
        self.run.track(
            Image(figure, title),  # Pass image data and/or caption
            name=title,  # The name of image set
            step=step,  # Step index (optional)
            context=self.context,
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #7517745cedb25a2f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:89 
        self.run.track(
            Audio(audio),  # Pass audio file or numpy array
            name=title,  # The name of distributions
            step=step,  # Step index (optional)
            context=self.context,
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #dfcaba9c0e847b0a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:101 
            self.run.track(value, name="{}-{}".format(scope_name, key), step=step, context=self.context)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #5f3f3118f296ffa8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:107 
            self.run.track(
                Image(value, title),  # Pass image data and/or caption
                name=title,  # The name of image set
                step=step,  # Step index (optional)
                context=self.context,
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #8c3399da77ad67cd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/trainer/logging/aim_logger.py:118 
            self.run.track(
                Audio(value),  # Pass audio file or numpy array
                name=title,  # The name of distributions
                step=step,  # Step index (optional)
                context=self.context,
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 20 low-confidence finding(s)
low env_fs dependency Excluded from app score #4989499dbfe2890e — Filesystem access.
pkgs/python/[email protected]/setup.py:45 
with open(os.path.join(cwd, "trainer", "VERSION")) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d339a7069ccdf7ed — Filesystem access.
pkgs/python/[email protected]/setup.py:64 
requirements = open(os.path.join(cwd, "requirements.txt"), "r").readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #353da3084e17075e — Filesystem access.
pkgs/python/[email protected]/setup.py:65 
with open(os.path.join(cwd, "requirements.dev.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f193ec3128f7111 — Filesystem access.
pkgs/python/[email protected]/setup.py:67 
with open(os.path.join(cwd, "requirements.test.txt"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a099e231772ceaf — Filesystem access.
pkgs/python/[email protected]/setup.py:71 
with open("README.md", "r", encoding="utf-8") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f26e168a61752ac0 — Filesystem access.
pkgs/python/[email protected]/trainer/__init__.py:6 
with open(os.path.join(os.path.dirname(__file__), "VERSION"), "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12ffeafdb62d1295 — Environment-variable access.
pkgs/python/[email protected]/trainer/analytics.py:5 
telemetry = os.environ.get("TRAINER_TELEMETRY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #5e85af6114cf0d77 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/trainer/analytics.py:12 
    _ = requests.get(URL, timeout=5)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #c9acb1af073679ab — Environment-variable access.
pkgs/python/[email protected]/trainer/distribute.py:47 
        my_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48af9cb440664f17 — Environment-variable access.
pkgs/python/[email protected]/trainer/distribute.py:64 
    if "CUDA_VISIBLE_DEVICES" in os.environ and os.environ["CUDA_VISIBLE_DEVICES"] != "":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7829c9e67d67896b — Environment-variable access.
pkgs/python/[email protected]/trainer/distribute.py:65 
        gpus = os.environ["CUDA_VISIBLE_DEVICES"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ea3bcae3dfafa92 — Environment-variable access.
pkgs/python/[email protected]/trainer/logging/__init__.py:14 
    if "MLFLOW_TRACKING_URI" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e149d9ccd3b158f1 — Environment-variable access.
pkgs/python/[email protected]/trainer/logging/__init__.py:15 
        return os.environ["MLFLOW_TRACKING_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7806bf2ad7d93cc — Environment-variable access.
pkgs/python/[email protected]/trainer/logging/__init__.py:20 
    if "AIM_TRACKING_URI" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7bcc1f2dff43aad — Environment-variable access.
pkgs/python/[email protected]/trainer/logging/__init__.py:21 
        return os.environ["AIM_TRACKING_URI"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d612d1ebde1ffbbd — Filesystem access.
pkgs/python/[email protected]/trainer/trainer.py:668 
            with open(file_path, "r", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7b1e2f392e78760 — Environment-variable access.
pkgs/python/[email protected]/trainer/trainer_utils.py:92 
    os.environ["CUDA_DEVICE_ORDER"] = "PCI_BUS_ID"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8eaa34ed26f457b8 — Environment-variable access.
pkgs/python/[email protected]/trainer/trainer_utils.py:93 
    if "CUDA_VISIBLE_DEVICES" not in os.environ and gpu is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1187978c1e4e9174 — Environment-variable access.
pkgs/python/[email protected]/trainer/trainer_utils.py:105 
    os.environ["PYTHONHASHSEED"] = str(training_seed)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b4f95d4a37b00c5 — Environment-variable access.
pkgs/python/[email protected]/trainer/utils/distributed.py:21 
        rank = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

transformers

python dependency
medium pii_flow dependency Excluded from app score #2ce6de3bd7372a06 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514 · flow /tmp/closeopen-n96yn88w/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 → /tmp/closeopen-n96yn88w/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514 
            logger.debug(f"[Kubeflow] Token file not found: {token_path}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 388 low-confidence finding(s)
low env_fs dependency Excluded from app score #b3fec1b9b02085f4 — Filesystem access.
pkgs/python/[email protected]/setup.py:311 
        with open(target, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2edce0c138d9ba0 — Filesystem access.
pkgs/python/[email protected]/setup.py:331 
        long_description=open("README.md", "r", encoding="utf-8").read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f5520eae17a5892 — Filesystem access.
pkgs/python/[email protected]/src/transformers/audio_utils.py:339 
            with open(audio, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5327d85b6dd7060d — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:176 
    with open(file_name, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aff57cea9553a2eb — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:182 
    with open(file_name, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #650396f6e0725e4b — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:228 
    autofile = (repo_path / "src" / "transformers" / "models" / "auto" / "auto_mappings.py").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49085fc9a0f00709 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:246 
                file = (repo_path / "src" / "transformers" / "models" / "auto" / filename).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e63a2863f4edbd5d — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:333 
    with open(toc_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa8ac9dc962bb3e8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:392 
    with open(module_name, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44e97df074b863ab — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:517 
            with open(original_test_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75396832a2e26e3e — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:567 
    with open(new_module_folder / f"modular_{new_lowercase_name}.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #699b59b7449cdac6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:572 
    with open(new_module_folder / "__init__.py", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6837cb8b84041fe — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:589 
    with open(tests_folder / "__init__.py", "w"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5367acc397e03d7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:593 
        with open(tests_folder / filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fecbc1f551479153 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/add_new_model_like.py:598 
    with open(repo_path / "docs" / "source" / "en" / "model_doc" / f"{new_lowercase_name}.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #c40289cdbe9f59fb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/transformers/cli/chat.py:212 
        response = requests.post(f"{self.base_url.rstrip('/')}/load_model", json={"model": model}, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #98104b77848d0e71 — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/chat.py:363 
            with open(examples_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abb7c733e8b1abbb — Filesystem access.
pkgs/python/[email protected]/src/transformers/cli/chat.py:659 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ceb3c2fb4ec3b29d — Filesystem access.
pkgs/python/[email protected]/src/transformers/configuration_utils.py:921 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e037e76c55e540ef — Filesystem access.
pkgs/python/[email protected]/src/transformers/configuration_utils.py:1136 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #500e520911785c85 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:159 
        with open(model, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95733dff98aa761d — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:706 
        with open(self.original_tokenizer.vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2d222ce02f58629 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1713 
        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80d3997a85a56061 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1753 
        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6c930b929acd104 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:1843 
        with open(vocab_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0e90d2119aa66d4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/convert_slow_tokenizer.py:2003 
        with open(self.vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8d8fc2e737e508d — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:576 
        with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78cfef3d93238277 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:580 
        with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e51042a2b524e55 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:584 
        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #076f824be75ea10a — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:769 
    with open(output_prediction_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3aa1fe53fc626d4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:772 
    with open(output_nbest_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8859c7a9b2fc360 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/metrics/squad_metrics.py:776 
        with open(output_null_log_odds_file, "w") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b968debc3fa3a5ce — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/processors/squad.py:515 
        with open(
            os.path.join(data_dir, self.train_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c101e5bbc6f0e8e1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/processors/squad.py:536 
        with open(
            os.path.join(data_dir, self.dev_file if filename is None else filename), "r", encoding="utf-8"
        ) as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b9003b5d389fa9e — Filesystem access.
pkgs/python/[email protected]/src/transformers/data/processors/utils.py:119 
        with open(input_file, "r", encoding="utf-8-sig") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #631b1934f83a3f7d — Filesystem access.
pkgs/python/[email protected]/src/transformers/distributed/configuration_utils.py:86 
        with open(json_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bfb501a9554ed4f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/distributed/fsdp.py:48 
        and strtobool(os.environ.get("ACCELERATE_USE_FSDP", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4e44663b976c94b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/distributed/fsdp.py:49 
        and strtobool(os.environ.get("FSDP_CPU_RAM_EFFICIENT_LOADING", "False")) == 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #216da4498b4cec3c — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:133 
    with open(module_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #565d87ec146505d9 — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:186 
    with open(filename, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce8947518f686ab5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:298 
        module_hash: str = hashlib.sha256(b"".join(bytes(f) + f.read_bytes() for f in module_files)).hexdigest()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bf850dca11e52be — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:341 
        source_files_hash.update(file_path.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccba12935304d676 — Filesystem access.
pkgs/python/[email protected]/src/transformers/dynamic_module_utils.py:813 
        with open(requirements, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #260ba8936d26821a — Filesystem access.
pkgs/python/[email protected]/src/transformers/feature_extraction_utils.py:611 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83dfc23589c1f977 — Filesystem access.
pkgs/python/[email protected]/src/transformers/feature_extraction_utils.py:639 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c176a8a348b77da7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1088 
        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1167e475ca729c2d — Filesystem access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1251 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ee632c9407ebc5b — Filesystem access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1372 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a5e5db667d724b7 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1818 
        graph_mixing_supported = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT", "1") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f65ec093f72f20e8 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1819 
        distributed = int(os.environ.get("WORLD_SIZE", "1")) > 1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #296807561ae6c3bc — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/configuration_utils.py:1824 
            os.environ.setdefault("NCCL_GRAPH_MIXING_SUPPORT", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85deeb7c69a714d8 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/continuous_batching/distributed.py:160 
        graph_mixing_not_disabled = os.environ.get("NCCL_GRAPH_MIXING_SUPPORT") != "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef1ee0af4f5e5d2a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/generation/utils.py:2177 
            os.environ["TOKENIZERS_PARALLELISM"] = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6718942358c0234d — Filesystem access.
pkgs/python/[email protected]/src/transformers/hf_argparser.py:333 
                    file_args += args_file.read_text().split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8b03a16df9d9f68 — Filesystem access.
pkgs/python/[email protected]/src/transformers/hf_argparser.py:403 
        with open(Path(json_file), encoding="utf-8") as open_json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #514031c71b156676 — Filesystem access.
pkgs/python/[email protected]/src/transformers/hf_argparser.py:425 
        outputs = self.parse_dict(yaml.safe_load(Path(yaml_file).read_text()), allow_extra_keys=allow_extra_keys)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e497c32465cfd23a — Filesystem access.
pkgs/python/[email protected]/src/transformers/image_processing_base.py:417 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a032236a7c08aba — Filesystem access.
pkgs/python/[email protected]/src/transformers/image_processing_base.py:445 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53a0350ef001c1e4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/accelerate.py:115 
                local_rank = int(os.environ.get("LOCAL_RANK", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #caa5d82c3fac1401 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/deepgemm.py:88 
    cuda_home = os.environ.get("CUDA_HOME") or os.environ.get("CUDA_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f7e0629158e93ec — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/deepgemm.py:113 
            with open(version_json) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #948f85519263cc4c — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/deepgemm.py:124 
            with open(version_txt) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e00de2473af5284a — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/deepgemm.py:135 
            with open(cuda_h) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bae9af620c0fe6b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/finegrained_fp8.py:258 
        and os.environ.get("TRANSFORMERS_DISABLE_DEEPGEMM_LINEAR", "0") != "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d40fa78977ba0c20 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/hub_kernels.py:57 
_TRANSFORMERS_USE_HUB_KERNELS = os.environ.get("USE_HUB_KERNELS", "YES").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f64c3077d8e87d1 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:40 
if os.getenv("WANDB_MODE") == "offline":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb786653314836f0 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:176 
    if os.getenv("DISABLE_MLFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da02877086ca2be7 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:212 
    if os.getenv("DISABLE_KUBEFLOW_INTEGRATION", "FALSE").upper() == "TRUE":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ca814840400c4d9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:214 
    return os.getenv("KUBEFLOW_TRAINER_SERVER_URL") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e3a38038804ac62 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:436 
    ray_scope = os.getenv("RAY_SCOPE", "last")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #454bfcfc73fc41de — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:602 
        self.logging_dir = os.getenv("TENSORBOARD_LOGGING_DIR", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae4d8fb09acf67a5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:664 
    with open(f"{output_dir}/model_architecture.txt", "w+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35aab644986c2919 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:709 
        self._log_model = WandbLogModel(os.getenv("WANDB_LOG_MODEL", "false"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #067086fe606f36bc — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:763 
                    project=os.getenv("WANDB_PROJECT", "huggingface"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b19a316d4b947179 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:775 
            _watch_model = os.getenv("WANDB_WATCH", "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad259284a7e8cec3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:815 
                                fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c8f2d4a183941e0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:878 
                            fa.write(f.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f6afb6ea4cfe389 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1170 
        log_assets = os.getenv("COMET_LOG_ASSETS", "FALSE").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d14d5ad2c621c236 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1174 
            comet_old_mode = os.getenv("COMET_MODE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5921773f05ab654 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1334 
        self._log_artifacts = os.getenv("HF_MLFLOW_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3db565c95b672d28 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1335 
        self._nested_run = os.getenv("MLFLOW_NESTED_RUN", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86d15c76680bffb3 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1336 
        self._tracking_uri = os.getenv("MLFLOW_TRACKING_URI", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d53252328ac52cc — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1337 
        self._experiment_name = os.getenv("MLFLOW_EXPERIMENT_NAME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c31362806ef57cde — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1338 
        self._flatten_params = os.getenv("MLFLOW_FLATTEN_PARAMS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3887dad3d46b89c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1339 
        self._run_id = os.getenv("MLFLOW_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2207538e33d4befc — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1340 
        self._max_log_params = os.getenv("MLFLOW_MAX_LOG_PARAMS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90e581304eb1ce82 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1403 
            mlflow_tags = os.getenv("MLFLOW_TAGS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #539530984d57c624 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1487 
        self.log_artifacts = os.getenv("HF_DAGSHUB_LOG_ARTIFACTS", "FALSE").upper() in ENV_VARS_TRUE_VALUES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6db8388d7d959bdb — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1488 
        self.name = os.getenv("HF_DAGSHUB_MODEL_NAME") or "main"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d3e57c2ba5811ce — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1489 
        self.remote = os.getenv("MLFLOW_TRACKING_URI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21b16ac007343b42 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1493 
            branch=os.getenv("BRANCH") or "main",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3115f4630292ea0a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1908 
                    self._log_model = os.getenv(
                        "CLEARML_LOG_MODEL",
                        "FALSE" if not ClearMLCallback._task_created_in_callback else "TRUE",
                    ).upper() in ENV_VARS_TRUE_VALUES.union({"TRUE"})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9729f45e97ae3f4d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1915 
                        project_name=os.getenv("CLEARML_PROJECT", "HuggingFace Transformers"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbed807a72cb80bd — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1916 
                        task_name=os.getenv("CLEARML_TASK", "Trainer"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b4f6b91ec1a2667 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:1920 
                    self._log_model = os.getenv("CLEARML_LOG_MODEL", "TRUE").upper() in ENV_VARS_TRUE_VALUES.union(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #226f2480ff2296a8 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2189 
            log_model_env = os.getenv("HF_DVCLIVE_LOG_MODEL", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52ab5ec636f64661 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2271 
        self._log_model = os.getenv("SWANLAB_LOG_MODEL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f177e32a5c00a8d9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2342 
            init_args["project"] = os.getenv("SWANLAB_PROJECT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fcef9248407c376 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2344 
            run_id = os.getenv("SWANLAB_RUN_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6d9104371545706 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2348 
            resume = os.getenv("SWANLAB_RESUME", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ca5118a7e03f344 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2494 
        ca_file = os.environ.get(self._ENV_CA_CERT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcf7598e0a1daa1b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 
        token_path = os.environ.get(self._ENV_TOKEN_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16cdc9bcd3a4e634 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2518 
            with open(token_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c7a54f5fd40ee69 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2534 
            url = os.environ.get(self._ENV_SERVER_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b40e0c3685dfb268 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/mxfp4.py:417 
        rank = int(os.environ.get("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d6e55f3ab3609eb — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/npu_flash_attention.py:30 
SPARSE_MODE = int(os.getenv("NPU_FA2_SPARSE_MODE", default=DOWN_RIGHT_ALIGNED_CAUSAL_MASK_MODE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77f96c8b15d03884 — Filesystem access.
pkgs/python/[email protected]/src/transformers/integrations/peft.py:708 
        with open(_adapter_model_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #283d49a1934bd328 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:77 
                rank = int(os.environ["RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1e6949ed038c4ce — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:78 
                local_rank = int(os.environ["LOCAL_RANK"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4eef42bd5062c039 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:79 
                world_size = int(os.environ["WORLD_SIZE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e774f10b6044d46b — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:103 
            current_device.set_device(int(os.environ["LOCAL_RANK"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40cb6c91468294ef — Environment-variable access.
pkgs/python/[email protected]/src/transformers/integrations/tensor_parallel.py:122 
        device_map = torch.device(f"{device_mesh.device_type}:{int(os.environ['LOCAL_RANK'])}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08a72d4ab70ba8fb — Filesystem access.
pkgs/python/[email protected]/src/transformers/model_debugging_utils.py:243 
    with open(full_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e23f12de28c97fbd — Filesystem access.
pkgs/python/[email protected]/src/transformers/model_debugging_utils.py:266 
    with open(summary_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec3526066793a4e7 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_flash_attention_utils.py:657 
            deterministic if deterministic is not None else os.getenv("FLASH_ATTENTION_DETERMINISTIC", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c36eae5fcb096bd6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:163 
XLA_USE_BF16 = os.environ.get("XLA_USE_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #876ef360f796aa53 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:164 
XLA_DOWNCAST_BF16 = os.environ.get("XLA_DOWNCAST_BF16", "0").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35543765d3e085bd — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:213 
    return _is_torch_distributed_initialized() and int(os.environ.get("LOCAL_RANK", "-1")) == 0

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a4b5a3c3b346b66 — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:323 
        with open("/proc/mounts", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ddb59dc68c96196 — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:356 
            with open(checkpoint_path, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f71dbc3d32c30e15 — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:3705 
            with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7928209dd1be127e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:4268 
        if device_map == "auto" and int(os.environ.get("WORLD_SIZE", "0")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f542d9689b30df23 — Filesystem access.
pkgs/python/[email protected]/src/transformers/modeling_utils.py:4570 
                        with open(file, "rb") as _fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1eca8bf9ef41125b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/auto_factory.py:311 
                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d6e62d033340d1e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/processing_auto.py:274 
                with open(tokenizer_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b90439a30d29341c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:435 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7461f362cbcf953b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:442 
    with open(merges_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66cfe48ca8555e63 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/auto/tokenization_auto.py:613 
    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7865d989dae3fbdb — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bark/processing_bark.py:101 
                with open(speaker_embeddings_path) as speaker_embeddings_json:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91bbad770e53f8e4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bark/processing_bark.py:161 
            with open(os.path.join(save_directory, speaker_embeddings_dict_path), "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38daf7a505a752ce — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:133 
        with open(monolingual_vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3301ce732bc7f456 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:306 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd7c005d0d3d3920 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bartpho/tokenization_bartpho.py:315 
            with open(out_monolingual_vocab_file, "w", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9706add33d5fc485 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert.py:33 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #addbc99bff41db67 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert_legacy.py:32 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2219bcae9eca3e6f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert/tokenization_bert_legacy.py:245 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a23994046cd84fc — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:41 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e32e0cbc7aebd27 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:278 
            with open(vocab_file, "wb") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d9288c156435fd4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:282 
            with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96b324250a0bf670 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:142 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ef7d9d834410185 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:316 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd140720195573a9 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:324 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecadabe36340ed81 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/bertweet/tokenization_bertweet.py:338 
                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8d3a60c6d4fcaaf — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:116 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #529514b193ba5ae2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:119 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2bb0fe9c74ef6db — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:293 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a39f6e762f731daf — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/biogpt/tokenization_biogpt.py:297 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25d61e0cf1b43946 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:89 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14142b8a9dbe01a9 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:92 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #842081c54de341ea — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:203 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a573f61d81545c8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/blenderbot_small/tokenization_blenderbot_small.py:207 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #166074d5d7c12e44 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/clvp/tokenization_clvp.py:149 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42be66a9c57ad2cb — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/clvp/tokenization_clvp.py:155 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #041fd3ac4068033a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/cpm/tokenization_cpm.py:324 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cbd84e321d9b498a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/cpmant/tokenization_cpmant.py:37 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1b9bc855b8df117 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/cpmant/tokenization_cpmant.py:219 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ec7ac93e895a267 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/ctrl/tokenization_ctrl.py:128 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #322a14ae3a48205b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/ctrl/tokenization_ctrl.py:131 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9790d5f82243031 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/esm/openfold_utils/residue_constants.py:417 
    stereo_chemical_props = resources.read_text("openfold.resources", "stereo_chemical_props.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56bc745b3d08c996 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/esm/tokenization_esm.py:28 
    with open(vocab_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40849a2cc1d9d495 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/esm/tokenization_esm.py:136 
        with open(vocab_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2155851fc6a1fc1c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:65 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18dc689451c307bb — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fastspeech2_conformer/tokenization_fastspeech2_conformer.py:163 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4239bafb8aa6ddfc — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:237 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71e55661d9266be6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:240 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a4fbcc1b1c9ced9 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:498 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3557e7995599eacf — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/flaubert/tokenization_flaubert.py:502 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b89b8199b8ab90da — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:204 
        with open(src_vocab_file, encoding="utf-8") as src_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95f844c0d288057b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:206 
        with open(tgt_vocab_file, encoding="utf-8") as tgt_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4723eb0994323753 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:209 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d58818c6538aa57e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:446 
        with open(src_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9545644694f8e690 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:449 
        with open(tgt_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d81e34339969076f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/fsmt/tokenization_fsmt.py:454 
        with open(merges_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6668c2fe5b8d52a4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:35 
    with open(emoji_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17a9390ac963c23f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:41 
    with open(vocab_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef546a749db9b79e — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:180 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #014d5eeddeec1a72 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/gpt_neox_japanese/tokenization_gpt_neox_japanese.py:190 
        with open(emoji_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c712aa747202bf8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/luke/tokenization_luke.py:287 
            with open(entity_vocab_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39a9f6d8013e0800 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:311 
            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a50c2c278adac93f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:375 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0438b6f03c4834a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/m2m_100/tokenization_m2m_100.py:380 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc17f69cec354ee2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:352 
                with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f74d2f1b1ed2d449 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:416 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d282f9b75405083 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/marian/tokenization_marian.py:421 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9176bf73c25fe43f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:598 
        with open(save_index_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85720d7295bd8987 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/megatron_gpt2/checkpoint_reshaping_and_interoperability.py:651 
    with open(tracker_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa6b4b43a6c691e1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mgp_str/tokenization_mgp_str.py:53 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d6fa02bc8e99d6b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mgp_str/tokenization_mgp_str.py:97 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce7c50fc00a3704f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mluke/tokenization_mluke.py:308 
            with open(entity_vocab_file, encoding="utf-8") as entity_vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #653d9f43e135d888 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/mluke/tokenization_mluke.py:1713 
        with open(entity_vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e169816d8d637ec3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:46 
            with open(rewriting_rules, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e51db5e086515053 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:195 
        self.byte_maps = json.load(open(vocab_file, "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7add9764d40e35c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/myt5/tokenization_myt5.py:373 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2979e10336de87c2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/oneformer/image_processing_oneformer.py:95 
    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45c198a8dae61dc8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/oneformer/image_processing_pil_oneformer.py:241 
    with open(fname, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa6334c9015a770f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:126 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85627d823aa84ddd — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:310 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4203ca2171ae9176 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/phobert/tokenization_phobert.py:331 
                with open(f, "r", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b62f40eaf956a1cc — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/pop2piano/tokenization_pop2piano.py:111 
        with open(vocab, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ee85c423894b0c4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/pop2piano/tokenization_pop2piano.py:358 
        with open(out_vocab_file, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1387a5557122263a — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/prophetnet/tokenization_prophetnet.py:259 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a988b4a963e4d23f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/prophetnet/tokenization_prophetnet.py:438 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f26247b4f0ab7a6c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:134 
        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b1150170b1da5eb — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:141 
        with open(passages_path, "rb") as passages_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1a34085d77b9c42 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:150 
        if not strtobool(os.environ.get("TRUST_REMOTE_CODE", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acbc1198c6f076d6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/rag/retrieval_rag.py:157 
        with open(resolved_meta_path, "rb") as metadata_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d7212a2273af9b6 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:52 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #575a0128ef3ceb3f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:139 
        with open(word_shape_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0696b7eae8f316f0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:142 
        with open(word_pronunciation_file, "r", encoding="utf8") as in_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1b7dc30806a6bfe — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1077 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a61b9de3ff5aedcb — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1088 
        with open(word_shape_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #adb32562076dddb0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/roc_bert/tokenization_roc_bert.py:1091 
        with open(word_pronunciation_file, "w", encoding="utf8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #301b9b78576c5313 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/siglip/tokenization_siglip.py:345 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #155e45cfa4731f45 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:271 
            with open(spm_save_path, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a0ead75d7915046 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:285 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afe2be60bfb47af4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/speech_to_text/tokenization_speech_to_text.py:290 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44d84e3c0806b128 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/splinter/tokenization_splinter.py:33 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f21a79f5facd90f — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/tapas/tokenization_tapas.py:91 
    with open(vocab_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e57f235cda9e14fa — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/tapas/tokenization_tapas.py:394 
        with open(vocab_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb57bf2aa515d750 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/vits/tokenization_vits.py:83 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a539f2e0a6dd26b — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/vits/tokenization_vits.py:242 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a7dc9ffee883493 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:154 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a15c07e724d568c — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2/tokenization_wav2vec2.py:647 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd55fce5d6748bd0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:138 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89f2166e9cd6b1e0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/wav2vec2_phoneme/tokenization_wav2vec2_phoneme.py:575 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc0a122ab5b443ff — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:266 
            with open(normalizer_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d05da133884f5ea — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:560 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc71023c370059d4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:563 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #923604c22f8a1882 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/whisper/tokenization_whisper.py:568 
            with open(normalizer_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60e3966b7dea79ee — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:244 
        with open(vocab_file, encoding="utf-8") as vocab_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #274c4b21959f4d21 — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:247 
        with open(merges_file, encoding="utf-8") as merges_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f26e39edc2cc665d — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:541 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bef3766146011aae — Filesystem access.
pkgs/python/[email protected]/src/transformers/models/xlm/tokenization_xlm.py:545 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88656c68361f1b83 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/__init__.py:921 
                with open(maybe_adapter_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9069f5cad51cc9e — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/audio_classification.py:174 
                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3993aa2fbbb579ff — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/automatic_speech_recognition.py:352 
                with open(inputs, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd421ffe66eb6301 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:464 
        with open(binary_path, "wb+") as f_output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08a1aec4be4ddfbf — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:527 
        with open(self.input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3f02dd7e19f3543 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:542 
        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a35a055cd220cd4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:570 
        with open(input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a92f8a0298ed84b — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:587 
        with open(self.output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #deb93bf654d8458a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1200 
        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf546d47d17a3786 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1202 
            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c25543dcc1476b2 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1321 
        if "TOKENIZERS_PARALLELISM" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be05fb21a53b3c45 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/pipelines/base.py:1323 
            os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b833608ba39f60d — Filesystem access.
pkgs/python/[email protected]/src/transformers/pipelines/zero_shot_audio_classification.py:111 
                with open(audio, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af2e2f769a367bda — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1090 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66a9dcb3ef21b0b0 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1170 
            with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39c40312dcba02fe — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1178 
                    with open(output_chat_template_file_jinja, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c65a98f2522f37c — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1187 
                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #276c7b1250f56556 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1375 
            with open(resolved_chat_template_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1674f55a4734f3a8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1387 
                template_name: open(template_file, "r", encoding="utf-8").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #336696a6fb1aa93a — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1391 
                with open(resolved_raw_chat_template_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c000eb5ec5f070e — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1406 
                with open(resolved_processor_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36f8a52aacd07cf2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/processing_utils.py:1432 
                reader = open(resolved_audio_tokenizer_file, "r", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #8b6eb791a7d2adf6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/transformers/safetensors_conversion.py:48 
    result = httpx.post(sse_url, follow_redirects=True, json=data).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #c4f40921cebc7168 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:290 
        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92af149b7651c729 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:306 
        value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88dee733a2963ad1 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1079 
    if "TRANSFORMERS_TEST_BACKEND" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2011833a8b3efd6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1080 
        backend = os.environ["TRANSFORMERS_TEST_BACKEND"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78d410c926621d04 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1089 
    if "TRANSFORMERS_TEST_DEVICE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8499763e2e298c8c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:1090 
        torch_device = os.environ["TRANSFORMERS_TEST_DEVICE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c971df68a5e69338 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2161 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #120ef4e715d6a026 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2283 
            for k in list(os.environ.keys()):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f1cb4a77f42221e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2285 
                    del os.environ[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bc70e9df9b11d15 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2296 
    return mock.patch.dict(os.environ, kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc4cc190d2f25cf6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2311 
    env = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #922497d1d29b5657 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2413 
        with open(report_files["durations"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1473c7a547f34aeb — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2443 
    with open(report_files["failures_long"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a7e23ef30175d43 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2448 
    with open(report_files["failures_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3f3293f134abcc4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2453 
    with open(report_files["failures_line"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b42e4f2dc60fbae — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2457 
    with open(report_files["errors"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #166768d8a8b45fc7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2461 
    with open(report_files["warnings"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c84599ce6125f81 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2475 
    with open(report_files["summary_short"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9adf131d8a92c7d — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2479 
    with open(report_files["stats"], "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3c0fa8e09326667 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2579 
    worker = os.environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #159d6e9cf2582c5c — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2626 
    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4393d641665bba72 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2828 
        timeout = int(os.environ.get("PYTEST_TIMEOUT", "600"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90deacefb6dbf8a9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2864 
        if os.getenv("_INSIDE_SUB_PROCESS", None) == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fef36d39177570d5 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2867 
            test = " ".join(os.environ.get("PYTEST_CURRENT_TEST").split(" ")[:-1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f897767d4bb33e2e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2869 
                env = copy.deepcopy(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e8baacad7c11598 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:2986 
    skip_cuda_tests: bool = os.environ.get("SKIP_CUDA_DOCTEST", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa731f73daef72ea — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3224 
    if "TRANSFORMERS_TEST_DEVICE_SPEC" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #316261a81b0c2944 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3225 
        device_spec_path = os.environ["TRANSFORMERS_TEST_DEVICE_SPEC"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f961bb2d702b808 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3248 
        if "TRANSFORMERS_TEST_DEVICE" in os.environ and torch_device != device_name:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83ae7668830ea8b7 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3449 
    force_fullgraph = os.environ.get("TORCH_COMPILE_FORCE_FULLGRAPH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #079e7066cd3557e3 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3472 
    full_test_name = os.environ.get("PYTEST_CURRENT_TEST", "").split(" ")[0]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #039d31bc9cb4a74b — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3552 
    with open(actual_test_file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab9ddd3053bb94c2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3558 
    with open(caller_path) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e92b0c7502a81468 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3646 
    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3773969ed15aaac1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3648 
    with open(p, "a") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a851d8911f89d13d — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3765 
        if not os.environ.get("PYTEST_CURRENT_TEST", ""):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d57d023f6008c5ce — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3802 
            if os.getenv("CI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #294d4add6d37fdc3 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:3878 
    p = os.path.join(os.environ.get("_PATCHED_TESTING_METHODS_OUTPUT_DIR", ""), "captured_info.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6cf7eee366609d52 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4232 
    with open(file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a71567f79665f092 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4237 
    with open(file, "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5612ba66e80e0677 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4473 
            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a590f41f50dfe7e3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/testing_utils.py:4482 
            with open(new_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #161738f9a8ab1291 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_python.py:1397 
        with open(vocab_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df7b71d9a128899c — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_python.py:1406 
        with open(merge_file, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c055a8219003a7a — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1661 
                    with open(resolved_config_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f565980bd3df9d2 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1780 
            with open(tokenizer_config_file, encoding="utf-8") as tokenizer_config_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3b623702fc15a43 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1799 
            with open(chat_template_file, encoding="utf-8") as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1424b999e288f37 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1806 
            with open(template_file) as chat_template_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48fbdc7b39a64d2b — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1875 
                with open(special_tokens_map_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #394134a54b150b34 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1905 
                with open(added_tokens_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74f8dd4a7a512dcc — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:1918 
                with open(tokenizer_file, encoding="utf-8") as tokenizer_file_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f07ca6631fe81f56 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:2123 
        with open(tokenizer_config_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afe2a910798490f7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:2176 
            with open(added_tokens_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e5cd814647e702a — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3314 
            with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7834735fcc65967d — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3325 
                    with open(chat_template_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87ad927f81bcc72c — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3335 
                    with open(template_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4f0444b4ed1d932 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3608 
            with open(resolved_vocab_file, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fe81f4f4bf921eb — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3634 
                with open(resolved_vocab_txt, "r", encoding="utf-8") as vf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0216cc4a569316a3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_base.py:3660 
            with open(resolved_merges_file, "r", encoding="utf-8") as mf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e0aa4a5dd747ceb — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_sentencepiece.py:260 
            with open(out_vocab_file, "wb") as fi:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #968de2f8b1f1efa1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_tokenizers.py:121 
            with open(fast_tokenizer_file, encoding="utf-8") as tokenizer_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56aae10d02743c10 — Filesystem access.
pkgs/python/[email protected]/src/transformers/tokenization_utils_tokenizers.py:1335 
                with open(_config_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61d240db1d99631f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer.py:2465 
                model, device_ids=[int(os.getenv("SMDATAPARALLEL_LOCAL_RANK"))]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e850c5c60ded2805 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer.py:4021 
        with open(model_card_filepath, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6d1cd93c41f15e1 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer.py:4126 
                with open(index_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d701735b3870364f — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_callback.py:146 
        with open(json_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25ad0714f763f157 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_callback.py:152 
        with open(json_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c793f640a6e9cf4 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_jit_checkpoint.py:60 
            with open(sentinel_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #098a2bcf477d05c8 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:943 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ce1b070cbccf828 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:949 
            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a5555756021a3a7 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_pt_utils.py:955 
        with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf015447dcd963cf — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:166 
        os.environ["CUDA_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcbdbdf5e7bd4c68 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:167 
        os.environ["CUBLAS_WORKSPACE_CONFIG"] = ":16:8"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10bf1c204921f46e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:169 
        os.environ["ASCEND_LAUNCH_BLOCKING"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79fa19a07ad2dd95 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:170 
        os.environ["HCCL_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0263a828232d532f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:172 
        os.environ["FLASH_ATTENTION_DETERMINISTIC"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80f86e2f13aa1233 — Filesystem access.
pkgs/python/[email protected]/src/transformers/trainer_utils.py:1094 
    with open(load_index, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6409b296cf3d6ec0 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:86 
    if os.environ.get("TORCHELASTIC_RUN_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa8f9131dbec7bbf — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1556 
        self.mixed_precision = os.environ.get("ACCELERATE_MIXED_PRECISION", "no")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #212693b86a44f172 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1576 
                os.environ["ACCELERATE_DYNAMO_BACKEND"] = self.torch_compile_backend

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #320d586ca7097da4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1578 
                    os.environ["ACCELERATE_DYNAMO_MODE"] = self.torch_compile_mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5fc63f57dbc0d5a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1650 
        elif strtobool(os.environ.get("ACCELERATE_USE_DEEPSPEED", "false")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #616a1b6e293cc567 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1810 
        if self.use_cpu or strtobool(os.environ.get("ACCELERATE_USE_CPU", "False")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1db48a38de9dfec1 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1834 
                os.environ["ACCELERATE_USE_DEEPSPEED"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6594c55279c6060 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1837 
                del os.environ["ACCELERATE_USE_DEEPSPEED"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27a7e78a02c5bf2c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:1880 
                    "cuda:0" if torch.cuda.is_available() else os.environ.get("ACCELERATE_TORCH_DEVICE", "cpu")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2e5b24fb4a2eb20 — Filesystem access.
pkgs/python/[email protected]/src/transformers/training_args.py:2699 
            with open(self.fsdp_config, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66e9a9eb07e79f8c — Environment-variable access.
pkgs/python/[email protected]/src/transformers/training_args.py:2766 
        os.environ["FSDP_CPU_RAM_EFFICIENT_LOADING"] = cpu_ram_efficient_loading

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #4cad872fdb10abf6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/transformers/utils/attention_visualizer.py:183 
            img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #921c5da31124c2e5 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/generic.py:379 
        with open(json_file, encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #587d56426f485896 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/generic.py:862 
        with open(pretrained_model_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0d1a96a22e3dc06 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/generic.py:868 
        with open(os.path.join(pretrained_model_path, "config.json")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7afd29274ef801db — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:107 
HF_MODULES_CACHE = os.getenv("HF_MODULES_CACHE", os.path.join(constants.HF_HOME, "modules"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06005e643372b757 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:178 
        instance_data = httpx.get(os.environ["ECS_CONTAINER_METADATA_URI"]).json()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fe43080dea4f6a5 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:185 
    sagemaker_params = json.loads(os.getenv("SM_FRAMEWORK_PARAMS", "{}"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c14384b4ac36718 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:187 
    training_job_arn = os.getenv("TRAINING_JOB_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf609f226113a711 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:191 
        "sm_framework": os.getenv("SM_FRAMEWORK_MODULE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88dbe454704d9401 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:192 
        "sm_region": os.getenv("AWS_REGION", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb9afc7d927645ba — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:193 
        "sm_number_gpu": os.getenv("SM_NUM_GPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eae3b06e91ab2507 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:194 
        "sm_number_cpu": os.getenv("SM_NUM_CPUS", "0"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2e7350aa9d9604a — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:215 
    if os.environ.get("TRANSFORMERS_IS_CI", "").upper() in ENV_VARS_TRUE_VALUES:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #893f9a75d3e193c3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/hub.py:879 
    with open(index_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b735fcf332fa29d0 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:118 
    return os.getenv(env_variable, "false").lower() in ("true", "1", "y", "yes", "on")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a0085328e075f83 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:123 
    return os.getenv(env_variable, "true").lower() in ("false", "0", "n", "no", "off")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #398b60e5dc08e300 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:130 
USE_TORCH_XLA = os.environ.get("USE_TORCH_XLA", "1").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ea291bb01dd1f66 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:356 
    pytorch_cndev_based_mlu_check_previous_value = os.environ.get("PYTORCH_CNDEV_BASED_MLU_CHECK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e795b89a9a85291 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:358 
        os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = str(1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5552487dc5d74c02 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:362 
            os.environ["PYTORCH_CNDEV_BASED_MLU_CHECK"] = pytorch_cndev_based_mlu_check_previous_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2416870f60390f27 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:364 
            os.environ.pop("PYTORCH_CNDEV_BASED_MLU_CHECK", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a62e670db2514c9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:434 
    if os.environ.get("PT_HPU_LAZY_MODE", "1") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e360ba491e77b3f9 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1640 
    if os.getenv("TRANSFORMERS_DISABLE_TORCH_CHECK", "0") == "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fc92b605758d87e — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1689 
        if "DATABRICKS_RUNTIME_VERSION" in os.environ and os.environ["DATABRICKS_RUNTIME_VERSION"] < "11.0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1da048b45329a1e0 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1701 
    sagemaker_params = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af2fff0095d8cdf6 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1715 
    smp_options = os.getenv("SM_HP_MP_PARAMETERS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94136d223a8f6ccb — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1725 
    mpi_options = os.getenv("SM_FRAMEWORK_PARAMS", "{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #127723772fa59b80 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:1738 
    return "SAGEMAKER_JOB_NAME" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24dbee0694df8f85 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/import_utils.py:2850 
        with open(os.path.join(module_path, module_name), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a6ed6f5d41fb2a4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:64 
    env_level_str = os.getenv("TRANSFORMERS_VERBOSITY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c58ded7c967ee71 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:94 
            sys.stderr = open(os.devnull, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da67edb2083844e4 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:108 
        if os.getenv("TRANSFORMERS_VERBOSITY", None) == "detail":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f52c233c95003de5 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:114 
        ci = os.getenv("CI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #481d6f7e0dd88c1f — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/logging.py:322 
    no_advisory_warnings = os.getenv("TRANSFORMERS_NO_ADVISORY_WARNINGS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2921229ecc8e18c — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:172 
        Path(dump_path).write_text(json.dumps(records), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79cf6727dd3edbf9 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:182 
                records = json.loads(Path(record_file).read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a59abed7c7c0d061 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:327 
        report_path.write_text(json.dumps(self.build_report(), indent=2, sort_keys=True), encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e3e9ac184719a45 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:338 
    enabled_raw = os.environ.get("NETWORK_DEBUG_REPORT", "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b25f823d29be2da1 — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/network_logging.py:344 
    output_path = os.environ.get("NETWORK_DEBUG_REPORT_PATH", "").strip() or _DEFAULT_REPORT_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6af5352e13d347cb — Environment-variable access.
pkgs/python/[email protected]/src/transformers/utils/notebook.py:128 
        if "VSCODE_PID" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cc53df5f76c7795 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/pytest_helpers.py:39 
    data = json.loads(p.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddcc0cf72cd048f9 — Filesystem access.
pkgs/python/[email protected]/src/transformers/utils/quantization_config.py:144 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0e5fa5292ba83e3 — Filesystem access.
pkgs/python/[email protected]/src/transformers/video_processing_utils.py:769 
        with open(json_file_path, "w", encoding="utf-8") as writer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab23bc18b3c84454 — Filesystem access.
pkgs/python/[email protected]/src/transformers/video_processing_utils.py:789 
        with open(json_file, "r", encoding="utf-8") as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

aiohttp

python dependency
expand_more 29 low-confidence finding(s)
low env_fs dependency Excluded from app score #c42b0c75808244d3 — Filesystem access.
pkgs/python/[email protected]/aiohttp/cookiejar.py:207 
        with open(
            file_path,
            mode="w",
            encoding="utf-8",
            opener=lambda path, flags: os.open(path, flags, 0o600),
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e70ce543cf9e924 — Environment-variable access.
pkgs/python/[email protected]/aiohttp/helpers.py:73 
NO_EXTENSIONS = bool(os.environ.get("AIOHTTP_NO_EXTENSIONS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5efebcf790693047 — Environment-variable access.
pkgs/python/[email protected]/aiohttp/helpers.py:82 
    not sys.flags.ignore_environment and bool(os.environ.get("PYTHONASYNCIODEBUG"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9919ca00b12065e — Environment-variable access.
pkgs/python/[email protected]/aiohttp/helpers.py:228 
    netrc_env = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #fe34a39f4f5db744 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/aiohttp/test_utils.py:347 
        resp = await self._session.request(method, self.make_url(path), **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #0e4006f2d07a073d — Environment-variable access.
pkgs/python/[email protected]/aiohttp/web_fileresponse.py:50 
NOSENDFILE: Final[bool] = bool(os.environ.get("AIOHTTP_NOSENDFILE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling reachable #0cb9b17e4b26910f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs/code/client_middleware_cookbook.py:39 
    async with req.session.post("/log", data=req.url.host, middlewares=()) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling reachable #2a3b913c2fb5f0c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs/code/client_middleware_cookbook.py:65 
                async with req.session.post(url, data=self.refresh_token) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling reachable #97facd7dcbf109ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs/code/client_middleware_cookbook.py:87 
                    async with req.session.post(url, data=self.refresh_token) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling reachable #77aa8c0eff42e853 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/docs/code/client_middleware_cookbook.py:100 
            async with session.post("/refresh") as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling reachable #da66b3bbfd01ea08 — Environment-variable access.
pkgs/python/[email protected]/docs/conf.py:21 
    os.getenv("READTHEDOCS", "False") == "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #d23aeca66f28b331 — Environment-variable access.
pkgs/python/[email protected]/docs/conf.py:22 
    and os.environ["READTHEDOCS_VERSION_TYPE"] == "tag"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #716320a6a89639e6 — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:31 
with open(_version_path, encoding="latin1") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling reachable #7b4fccfa1b262a8b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/curl.py:12 
        async with session.request("GET", url) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling reachable #85be7b972a001001 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/logging_middleware.py:139 
        async with session.post("http://localhost:8080/echo", json=payload) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling reachable #56c24a52fed50429 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/retry_middleware.py:179 
        await session.post("http://localhost:8080/reset")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling reachable #5375753ded9f8bc5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/retry_middleware.py:210 
        await session.post("http://localhost:8080/reset")  # Reset counters

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling reachable #88d7a51bb76a7b0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/examples/token_refresh_middleware.py:65 
            async with session.post(
                self.token_endpoint,
                json={"refresh_token": self.refresh_token},
                middlewares=(),  # Disable middleware for this request
            ) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling reachable #398045d917504c97 — Filesystem access.
pkgs/python/[email protected]/examples/web_ws.py:20 
        with open(WS_FILE, "rb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #084ea112caf02e52 — Filesystem access.
pkgs/python/[email protected]/requirements/sync-direct-runtime-deps.py:12 
data = tomllib.loads(Path("pyproject.toml").read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab9dd2804084988b — Filesystem access.
pkgs/python/[email protected]/requirements/sync-direct-runtime-deps.py:19 
with open(Path("requirements", "runtime-deps.in"), "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d6fe16156213899 — Environment-variable access.
pkgs/python/[email protected]/setup.py:13 
    os.environ.get("AIOHTTP_USE_SYSTEM_DEPS", os.environ.get("USE_SYSTEM_DEPS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0be5901bd0450b59 — Environment-variable access.
pkgs/python/[email protected]/setup.py:15 
NO_EXTENSIONS: bool = bool(os.environ.get("AIOHTTP_NO_EXTENSIONS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #495f8a9d4fa52c39 — Environment-variable access.
pkgs/python/[email protected]/setup.py:16 
CYTHON_TRACING: bool = bool(os.environ.get("AIOHTTP_CYTHON_TRACE"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #fca190e3df59ccd4 — Filesystem access.
pkgs/python/[email protected]/tools/check_sum.py:30 
        hasher.update(full_src.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #e231103bb6099987 — Filesystem access.
pkgs/python/[email protected]/tools/check_sum.py:37 
        dst_hash = dst.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #6d291b70ba1120af — Filesystem access.
pkgs/python/[email protected]/tools/check_sum.py:41 
        dst.write_text(src_hash)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #d310c72380bc3fda — Filesystem access.
pkgs/python/[email protected]/tools/cleanup_changes.py:30 
    changes = (root / "CHANGES.rst").read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #76540821dc6288f4 — Filesystem access.
pkgs/python/[email protected]/tools/gen.py:16 
    code = compile(hdrs_file.read_text(), str(hdrs_file), "exec")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

anyascii

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #6d3b2c737c486099 — Filesystem access.
pkgs/python/[email protected]/anyascii/__init__.py:10 
        return files(package).joinpath(resource).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

bnnumerizer

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #2be6a127439370d4 — Filesystem access.
pkgs/python/[email protected]/setup.py:23 
  long_description=open('README.md',encoding='utf-8').read() + '\n\n' + open('CHANGELOG.txt',encoding='utf-8').read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

bnunicodenormalizer

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #62c666e43ed99af4 — Filesystem access.
pkgs/python/[email protected]/setup.py:23 
  long_description=open('README.md',encoding='utf-8').read() + '\n\n' + open('CHANGELOG.txt',encoding='utf-8').read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

coqpit

python dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #13762872e7cda819 — Filesystem access.
pkgs/python/[email protected]/coqpit/coqpit.py:713 
        with open(file_name, "w", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a06ebe0c67e2ff8 — Filesystem access.
pkgs/python/[email protected]/coqpit/coqpit.py:726 
        with open(file_name, "r", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ba5fcd3aee3b99f — Filesystem access.
pkgs/python/[email protected]/setup.py:10 
with open(os.path.join(cwd, "VERSION")) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #123afee19cf19970 — Filesystem access.
pkgs/python/[email protected]/setup.py:23 
        with open(version_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e9f834459ac444a — Filesystem access.
pkgs/python/[email protected]/setup.py:33 
requirements = open(os.path.join(cwd, "requirements.txt"), "r").readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6197404356434c28 — Filesystem access.
pkgs/python/[email protected]/setup.py:34 
with open("README.md", "r", encoding="utf-8") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

cython

python dependency
expand_more 152 low-confidence finding(s)
low env_fs dependency Excluded from app score #ece6f04d72a76c0a — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/BuildExecutable.py:45 
CC = get_config_var('CC', os.environ.get('CC', ''))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79f332694989f031 — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/BuildExecutable.py:46 
CFLAGS = get_config_var('CFLAGS') + ' ' + os.environ.get('CFLAGS', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02f2d74c6f242ea9 — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/BuildExecutable.py:47 
LINKCC = get_config_var('LINKCC', os.environ.get('LINKCC', CC))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4db4bf0033970c03 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Cache.py:39 
    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29fb7d86c9637163 — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Cache.py:60 
    if "CYTHON_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77465a08eb1a9b17 — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Cache.py:61 
        return os.environ["CYTHON_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7800a51141f88c8d — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Cache.py:69 
            parent = os.environ.get("XDG_CACHE_HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30f6bf59629879e8 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Cache.py:148 
                with open(c_file, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fad470f06614139d — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Cache.py:163 
            with open(c_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df13fe9aa54710e5 — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Dependencies.py:974 
        force = os.environ.get("CYTHON_FORCE_REGEN") == "1"  # allow global overrides for build systems

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ea6325abf921775 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Dependencies.py:1161 
                f = open(c_file, 'r', encoding='iso8859-1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ad6c3e65485f27a — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Dependencies.py:1214 
if os.environ.get('XML_RESULTS'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #879d2a46f3eb6acb — Environment-variable access.
pkgs/python/[email protected]/Cython/Build/Dependencies.py:1215 
    compile_result_dir = os.environ['XML_RESULTS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5400a4d1b762db45 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Dependencies.py:1234 
                output = open(os.path.join(compile_result_dir, name + ".xml"), "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecc1322c5cf487b2 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Inline.py:248 
            fh = open(pyx_file, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f354a12a6d3c0e9 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:154 
        with open(fname, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6864a4fac1d1105e — Filesystem access.
pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:353 
                with open(html_file, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc239a513f483694 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:379 
        with open(pgo_wrapper_c_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51db5e466ec0b70a — Filesystem access.
pkgs/python/[email protected]/Cython/Build/IpythonMagic.py:406 
        with open(pyx_file, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #054b558edef3fce9 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:44 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e52d73f936da7093 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:51 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #333716dcfd9ed45d — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:55 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef0c0a935a0d22f1 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:60 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cb3598227530e2a — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:67 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e874eb8288efb899 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:73 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa2fbf3ce4924edc — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:89 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20e8a331dbfad647 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:101 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3003904197467e1b — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:117 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfc8e80597766abb — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:138 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3284fe6cf84c2e8 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestCyCache.py:165 
        with open(hash_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a46854501582487 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestDependencies.py:12 
    with open(pjoin(dir_path, filename), "w", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f35457130161bf45 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:40 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd9299a076920e88 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:43 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc3333952f059984 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:56 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d50ab21469ac5206 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:59 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a185a943ca9a0fd2 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:64 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85c31389c1eb9a1b — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:82 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d45f6b7e84ddf504 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:85 
        with open(a_py, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52a6a307efbf2d52 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:98 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #157b7f45d8f392eb — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:101 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91379d3ea5811307 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:106 
        with open(a_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd87fbefb96885ee — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:124 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f80008dd2271e7a — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:127 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d88032efaf04c962 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:130 
        with open(b_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #225a117b7d77899a — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:144 
        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6eb62063d8a464db — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:147 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa0a08a20dc0d562 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:152 
        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35bdd52f1dfd8407 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:175 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dec168c882199e93 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:178 
        with open(a_pyx, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49f7418548d0cf54 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:181 
        with open(b_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff73deb6d531be82 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:184 
        with open(b_py, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50ffe8905c72bc63 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:198 
        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d97ec92a28bd7e96 — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:201 
        with open(a_pxd, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e32336c345dabab — Filesystem access.
pkgs/python/[email protected]/Cython/Build/Tests/TestRecythonize.py:206 
        with open(b_c) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c873264d10886334 — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/Annotate.py:126 
        with open(html_filename, "w", encoding="UTF-8") as out_buffer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5518ab3efdbbb50 — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/FlowControl.py:739 
            with open(dot_output, 'w') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d29fa647b4db05e9 — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/Main.py:357 
            with open(dep_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8eaf54655de02a0e — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/Main.py:413 
        with open(source_desc.filename, encoding='iso8859-1', newline='') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92dfb64b0448bde6 — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/Main.py:546 
            with open(html_filename, encoding="UTF-8") as html_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44c5c63a1749b780 — Filesystem access.
pkgs/python/[email protected]/Cython/Compiler/Tests/TestParseTreeTransforms.py:269 
            f = open(self.debug_dest)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #200760d7f37ddbc0 — Filesystem access.
pkgs/python/[email protected]/Cython/Coverage.py:313 
        with open(c_file, encoding='utf8') as lines:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf29a10589cc7b51 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Cygdb.py:81 
                interpreter_file = open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b4ce1b3b0f1018c — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Cygdb.py:160 
    with open(tempfilename) as tempfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3918eece2cb7329f — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/DebugWriter.py:81 
        with open(interpreter_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23200c6e4728eb0f — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:23 
with open(codefile) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f26dad60cffa6f83 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:115 
            new_stderr = open(os.devnull, 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81ff0d468f3dc3b2 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:210 
        with open(self.gdb_command_file, 'a') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b9e68a31b05c8bb — Environment-variable access.
pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:217 
        path = os.environ.get('PYTHONPATH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcd67febd5b4d945 — Environment-variable access.
pkgs/python/[email protected]/Cython/Debugger/Tests/TestLibCython.py:222 
        env = dict(os.environ, PYTHONPATH=os.pathsep.join(paths))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45c13eba8cc7673d — Environment-variable access.
pkgs/python/[email protected]/Cython/Debugger/Tests/test_libcython_in_gdb.py:523 
_do_debug = os.environ.get('GDB_DEBUG')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d834b0ddf1f2352 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/Tests/test_libcython_in_gdb.py:525 
    _debug_file = open('/dev/tty', 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b31c603b7a962b2 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/libcython.py:521 
        with open(self.filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6cca7620901d2a24 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/libcython.py:777 
                f = open(arg)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #616c12314342dbb4 — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/libpython.py:954 
            with open(os_fsencode(filename)) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c3cade9e522a49d — Filesystem access.
pkgs/python/[email protected]/Cython/Debugger/libpython.py:1746 
            f = open(os_fsencode(filename))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be2f363f85ce571d — Filesystem access.
pkgs/python/[email protected]/Cython/Tempita/_tempita.py:155 
        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ddff232dc6d8482 — Environment-variable access.
pkgs/python/[email protected]/Cython/Tempita/_tempita.py:1063 
        vars.update(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b502e1efe5001eb — Filesystem access.
pkgs/python/[email protected]/Cython/Tempita/_tempita.py:1077 
        with open(template_name, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a380d8b225d0f94 — Filesystem access.
pkgs/python/[email protected]/Cython/Tempita/_tempita.py:1082 
        with open(options.output, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ec1b969f206f25f — Filesystem access.
pkgs/python/[email protected]/Cython/TestUtils.py:262 
            with open(c_file, encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b26ed36454827c1 — Filesystem access.
pkgs/python/[email protected]/Cython/TestUtils.py:325 
    with open(tree_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b0b99a6372dc2b4 — Filesystem access.
pkgs/python/[email protected]/Cython/TestUtils.py:336 
                    cur_file = open(path, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d82ae04d109cbc3 — Filesystem access.
pkgs/python/[email protected]/Cython/TestUtils.py:381 
    with open(file_path, mode=mode, encoding=encoding, newline=newline) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfd3b4bd4b717405 — Filesystem access.
pkgs/python/[email protected]/Cython/Tests/TestTestUtils.py:28 
        with open(file_path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e3e7e22378ff54f — Filesystem access.
pkgs/python/[email protected]/Cython/Tests/xmlrunner.py:317 
                report_file = open('%s%sTEST-%s.xml' %
                    (test_runner.output, os.sep, suite), 'w')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8c53504af51bf00 — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:157 
    return open(path, "w", encoding="UTF-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59991820b204c197 — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:185 
            with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4f8aa1f11830400 — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:208 
            with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c685f0240e74c52 — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:397 
            f = open(source_filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e410845740ee2b44 — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:402 
            stream = open(source_filename, encoding=encoding, errors=error_handling)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a0876cb1dcafe47 — Filesystem access.
pkgs/python/[email protected]/Cython/Utils.py:645 
    with open(target+'.dep', 'w') as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #7a7a5b28ad0a76e7 — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/bm_raytrace.py:208 
        with open(filename, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #5a96bb78f34ad31d — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/report.py:16 
        with open(csv_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #65d318c97874b6b6 — Environment-variable access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:40 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #216d1df2820a5aec — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:88 
    with open(tmp_dir / 'setup.py', 'w') as setup_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #3a68b1675e965704 — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:153 
        with open(profile_input) as data_file_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #150c98353b012303 — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:154 
            with open(data_file_name, mode='w') as data_file_out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #75f2a635ab86c6ea — Environment-variable access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:275 
    logging.info(f"CFLAGS={os.environ.get('CFLAGS', DISTUTILS_CFLAGS)}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #bface74bc333e797 — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:534 
        with open(options.report_csv, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #d6341af42cff0482 — Filesystem access.
pkgs/python/[email protected]/Demos/benchmarks/run_benchmarks.py:541 
        with open(options.report_sizes_csv, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bce953cb471b76b6 — Filesystem access.
pkgs/python/[email protected]/Demos/embed/assert_equal.py:5 
f1 = open(sys.argv[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93a88b2d740f9c58 — Filesystem access.
pkgs/python/[email protected]/Demos/embed/assert_equal.py:6 
f2 = open(sys.argv[2])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e81b180bec46525c — Filesystem access.
pkgs/python/[email protected]/Tools/cevaltrace.py:34 
    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3287499aa5177cb6 — Filesystem access.
pkgs/python/[email protected]/Tools/cevaltrace.py:71 
        with open(code_obj.co_filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf11f05d98115675 — Filesystem access.
pkgs/python/[email protected]/Tools/cevaltrace.py:97 
        with open(version_header) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1ac7c70895e0233 — Filesystem access.
pkgs/python/[email protected]/Tools/cython-generate-lexicon.py:50 
    with open(Lexicon.__file__, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f01deabbcf96bdb7 — Filesystem access.
pkgs/python/[email protected]/Tools/cython-generate-lexicon.py:67 
    with open(outfile, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0f8c16b5ac4e056 — Filesystem access.
pkgs/python/[email protected]/Tools/cython-generate-shadow-pyi.py:34 
    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a7380443b09b5aa — Filesystem access.
pkgs/python/[email protected]/Tools/cython-generate-shadow-pyi.py:43 
    with open(file_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b7f64c0e0e0938f — Filesystem access.
pkgs/python/[email protected]/Tools/cython-generate-shadow-pyi.py:65 
    with open(file_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3472ed1b2eee5f5c — Filesystem access.
pkgs/python/[email protected]/Tools/download_release.py:68 
                with open(temp_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #2292464a18013179 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/Tools/dump_github_issues.py:30 
    with urlopen("https://api.github.com/rate_limit") as p:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #9d376caa619808f2 — Filesystem access.
pkgs/python/[email protected]/Tools/examine_sanitizer_logs.py:8 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dcfe1104cc494a0 — Filesystem access.
pkgs/python/[email protected]/Tools/gen_tests_for_posix_pxds.py:37 
    with open(TEST_PATH, "w", encoding="utf-8", newline="\n") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36cbe4991661de22 — Filesystem access.
pkgs/python/[email protected]/Tools/jedityper.py:112 
        with open(target_path, 'w', encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e91555787ad99f35 — Filesystem access.
pkgs/python/[email protected]/Tools/make_dataclass_tests.py:422 
    with open(py_module_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82494ad82a7dbdfe — Filesystem access.
pkgs/python/[email protected]/Tools/make_dataclass_tests.py:431 
    with open(output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04ec311c26c89794 — Filesystem access.
pkgs/python/[email protected]/pyximport/pyximport.py:146 
        with open(dependfile) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3c4426dad799159 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:401 
        cc = os.environ.get('CXX') or sysconfig.get_config_var('CXX')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2686011fa9c7a84f — Environment-variable access.
pkgs/python/[email protected]/runtests.py:403 
        cc = os.environ.get('CC') or sysconfig.get_config_var('CC')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #601637451054bc44 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:414 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21b35da61b9eb5e5 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:522 
INCLUDE_DIRS = [ d for d in os.getenv('INCLUDE', '').split(os.pathsep) if d ]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #419452cdd66360fb — Environment-variable access.
pkgs/python/[email protected]/runtests.py:523 
CFLAGS = os.getenv('CFLAGS', '').split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f0164b45720c263 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:524 
CCACHE = os.getenv('CYTHON_RUNTESTS_CCACHE', '').split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74889b1a404e6e43 — Filesystem access.
pkgs/python/[email protected]/runtests.py:549 
    with io_open(filepath, encoding='ISO-8859-1', errors='ignore') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90298b1093c2ed82 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1070 
            with open(self.module_path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45ea785f158f56e9 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1191 
                with open(src) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7621b6e60ce27ec1 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1192 
                    with open(dest, 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f22b662c8022b8e9 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1211 
        with io_open(source_file, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b167c336b9f858f — Filesystem access.
pkgs/python/[email protected]/runtests.py:1216 
        with io_open(source_file, 'r', encoding='ISO-8859-1') as source_and_output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc18bc4e770de0f6 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1218 
            out = io_open(os.path.join(workdir, os.path.basename(source_file)),
                          'w', encoding='ISO-8859-1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #324f49de41fb10f3 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1442 
                    with open(os.path.join(workdir, file)) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5eec89510996262 — Filesystem access.
pkgs/python/[email protected]/runtests.py:1444 
                    with open(os.path.join(workdir2, file)) as fid:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #260edb4b57d74979 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2045 
        old_path = os.environ.get('PYTHONPATH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19e2efde456263f4 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2051 
        env = dict(os.environ, PYTHONPATH=new_path, PYTHONIOENCODING='utf8',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fda53f28657a86a — Filesystem access.
pkgs/python/[email protected]/runtests.py:2218 
        with open(list_file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0eb7b3d3849cda8 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2351 
    os.environ['CYTHON_PROJECT_DIR'] = os.path.abspath(os.path.dirname(__file__))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #764b279d1cfd7e6e — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2604 
        if "PYTHONIOENCODING" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5123787f007dfd55 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2606 
            os.environ["PYTHONIOENCODING"] = sys.stdout.encoding or sys.getdefaultencoding()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #019e892bbd45f656 — Filesystem access.
pkgs/python/[email protected]/runtests.py:2766 
        with open("coverage-report.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d6f2cd70f27959e — Environment-variable access.
pkgs/python/[email protected]/runtests.py:2989 
    if 'CI' in os.environ and sys.platform == 'darwin' and 'cpp' in languages:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #802397b936ad0af2 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:3081 
    old_faulhandler_envvar = os.environ.get('PYTHONFAULTHANDLER')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d8adc53e5b75cd7 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:3087 
        os.environ['PYTHONFAULTHANDLER'] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e41f9ba3616b28ee — Environment-variable access.
pkgs/python/[email protected]/runtests.py:3112 
        if os.environ.get('PYTHONFAULTHANDLER') != old_faulhandler_envvar:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e25f1ea16c7f7ce8 — Environment-variable access.
pkgs/python/[email protected]/runtests.py:3114 
                del os.environ['PYTHONFAULTHANDLER']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b89384e3d649dddc — Environment-variable access.
pkgs/python/[email protected]/runtests.py:3116 
                os.environ['PYTHONFAULTHANDLER'] = old_faulhandler_envvar

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d0095675c22f0bd — Environment-variable access.
pkgs/python/[email protected]/setup.py:27 
    os.environ['COPY_EXTENDED_ATTRIBUTES_DISABLE'] = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c4e54baf8642830 — Environment-variable access.
pkgs/python/[email protected]/setup.py:28 
    os.environ['COPYFILE_DISABLE'] = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7cf25d35bfe77db7 — Environment-variable access.
pkgs/python/[email protected]/setup.py:129 
        'pgen', path=os.pathsep.join([os.environ['PATH'], os.path.join(get_path('include'), '..', 'Parser')]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa77fe08621c7b91 — Filesystem access.
pkgs/python/[email protected]/setup.py:246 
    with open("CHANGES.rst", encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47f78478d5a1a75a — Environment-variable access.
pkgs/python/[email protected]/setup.py:320 
    if os.environ.get(env_var) == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bdb771c76e2fbbf1 — Environment-variable access.
pkgs/python/[email protected]/setup.py:349 
    env_var = os.environ.get(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

encodec

python dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #6a4b3f14f03f4be4 — Filesystem access.
pkgs/python/[email protected]/encodec/__main__.py:92 
        out, out_sample_rate = decompress(args.input.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8a1f428921ad5ed — Filesystem access.
pkgs/python/[email protected]/encodec/utils.py:67 
    with open(path, 'rb') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb7e2a02af2a1b5d — Filesystem access.
pkgs/python/[email protected]/setup.py:21 
for line in open('encodec/__init__.py'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #762365dcb0ed4044 — Filesystem access.
pkgs/python/[email protected]/setup.py:31 
    with open(HERE / "README.md", encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

flask

python dependency
expand_more 21 low-confidence finding(s)
low env_fs dependency Excluded from app score #f21d5530a72058b9 — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:359 
            return open(path, mode)  # pyright: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2af108c7496f90e — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:361 
        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c67244084fb8755 — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:381 
            return open(path, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #754cbc8fa4e45d8e — Filesystem access.
pkgs/python/[email protected]/src/flask/app.py:383 
        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01d83c5072fb3b21 — Environment-variable access.
pkgs/python/[email protected]/src/flask/app.py:611 
        if os.environ.get("FLASK_RUN_FROM_CLI") == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37d46587f8491e77 — Environment-variable access.
pkgs/python/[email protected]/src/flask/app.py:627 
            if "FLASK_DEBUG" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #082b3e4a09fe4c7b — Filesystem access.
pkgs/python/[email protected]/src/flask/blueprints.py:126 
            return open(path, mode)  # pyright: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ef70d1ee8a6a109 — Filesystem access.
pkgs/python/[email protected]/src/flask/blueprints.py:128 
        return open(path, mode, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccaf848cdad85f73 — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:481 
    os.environ["FLASK_DEBUG"] = "1" if value else "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dba5e73ca782b79 — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:675 
        os.environ["FLASK_RUN_FROM_CLI"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45fdd17138c0aaad — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:766 
        if key in os.environ or value is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #020a645fa653d11a — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:769 
        os.environ[key] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33af99410c698815 — Environment-variable access.
pkgs/python/[email protected]/src/flask/cli.py:1028 
    startup = os.environ.get("PYTHONSTARTUP")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6c88a0d1225f455 — Filesystem access.
pkgs/python/[email protected]/src/flask/cli.py:1030 
        with open(startup) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #876b4d67881941ea — Environment-variable access.
pkgs/python/[email protected]/src/flask/config.py:114 
        rv = os.environ.get(variable_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9efe9c29fe3212fe — Environment-variable access.
pkgs/python/[email protected]/src/flask/config.py:154 
        for key in sorted(os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c3dea714a992311 — Environment-variable access.
pkgs/python/[email protected]/src/flask/config.py:158 
            value = os.environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #047cbdd1d36dbf97 — Filesystem access.
pkgs/python/[email protected]/src/flask/config.py:208 
            with open(filename, mode="rb") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d732b1169b95cf3 — Filesystem access.
pkgs/python/[email protected]/src/flask/config.py:293 
            with open(filename, "r" if text else "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ff8e9568faf6ee7 — Environment-variable access.
pkgs/python/[email protected]/src/flask/helpers.py:32 
    val = os.environ.get("FLASK_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #affdfc38ce815f6e — Environment-variable access.
pkgs/python/[email protected]/src/flask/helpers.py:43 
    val = os.environ.get("FLASK_SKIP_DOTENV")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fsspec

python dependency
expand_more 38 low-confidence finding(s)
low env_fs dependency Excluded from app score #9c13915ec0b44b86 — Filesystem access.
pkgs/python/[email protected]/fsspec/caching.py:156 
                fd = open(self.location, "wb+")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef5d054fca180386 — Filesystem access.
pkgs/python/[email protected]/fsspec/caching.py:161 
            fd = open(self.location, "r+b")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c9edc23249f9a33 — Environment-variable access.
pkgs/python/[email protected]/fsspec/config.py:11 
conf_dir = os.environ.get("FSSPEC_CONFIG_DIR", default_conf_dir)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf8b6f8345664acc — Environment-variable access.
pkgs/python/[email protected]/fsspec/config.py:14 
def set_conf_env(conf_dict, envdict=os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #292bb658e5d240ab — Filesystem access.
pkgs/python/[email protected]/fsspec/config.py:93 
            with open(os.path.join(cdir, fn)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47aa882ffb10045d — Filesystem access.
pkgs/python/[email protected]/fsspec/conftest.py:111 
    with open(os.path.join(d, "out"), "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8da6960fbe2e69c3 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cache_metadata.py:51 
        with open(fn, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a4e1aa7a084ec89 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:325 
                return open(fn, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dec59eabffef5638 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:611 
            open(firstpart(fn0) if fn0 else fn1, mode=open_files.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52be1eeb3f08dab4 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:678 
            with open(fn, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a978288f6f1cda79 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:690 
            with self.fs._open(path, mode="rb", **kwargs) as f, open(fn, "wb") as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b851dd25f36f380f — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:736 
            f = open(fn, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b8ae3ff2fc95bab — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:760 
        with open(fn, "rb") as f:  # noqa ASYNC230

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5eb60eacaf35a918 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:916 
            with self.fs._open(path, mode="rb", **kwargs) as f, open(fn, "wb") as f2:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a080aed75dd4314 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:950 
            return open(fn, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0aa46335d707b85c — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/cached.py:973 
        self.fh = open(fn, mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c152e749f762e64f — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/dirfs.py:146 
        return self.fs.write_text(
            self._join(path),
            value,
            encoding=encoding,
            errors=errors,
            newline=newline,
            **kwargs,
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82d1296f770d4c35 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/ftp.py:205 
            outfile = open(lpath, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #918fc6995333f083 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/http.py:271 
                outfile = open(lpath, "wb")  # noqa: ASYNC230

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26faa6339b65646e — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/http.py:303 
                context = open(lpath, "rb")  # noqa: ASYNC230

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #a46434a825abdd88 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/fsspec/implementations/http.py:566 
        async with session.put(
            self.encode_url(url), data=value, headers=headers, **kwargs
        ) as r:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #c48204b89c40d923 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/http.py:837 
        with open(file, "r+b") as f:  # noqa: ASYNC230

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb294815fd264f11 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/http_sync.py:390 
            lpath = open(lpath, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abc82c8b854fd26d — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/http_sync.py:411 
                context = open(lpath, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #71785b8da2c2abd2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/fsspec/implementations/jupyter.py:86 
        self.session.put(f"{self.url}/{path}", json=json)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #177b1d9e047e43fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/fsspec/implementations/jupyter.py:99 
        self.session.put(f"{self.url}/{path}", json=json)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #6468cd16d259ae77 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/local.py:154 
            with open(path1, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37000c64357ce746 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/local.py:224 
            open(path, "a").close()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d6a3ed76e5170e2 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/local.py:395 
                self.f = open(self.path, mode=self.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2e950b85f34aeb0 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/local.py:404 
                self.f = open(name, mode=self.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c8cd0acb16b6331 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/reference.py:863 
        with open(lpath, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36a0ca7fece755d4 — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/reference.py:874 
            with open(lpath, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #826ca3947a2a4eab — Filesystem access.
pkgs/python/[email protected]/fsspec/implementations/reference.py:1268 
        with open(lpath, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #82f4556d290d77b2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/fsspec/implementations/webhdfs.py:455 
        out = self.fs.session.post(
            self.location,
            data=self.buffer.getvalue(),
            headers={"content-type": "application/octet-stream"},
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7cf1ba92da1c5aad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/fsspec/implementations/webhdfs.py:475 
            out2 = self.fs.session.put(
                location, headers={"content-type": "application/octet-stream"}
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #120b1b849329d9b8 — Filesystem access.
pkgs/python/[email protected]/fsspec/spec.py:940 
                outfile = open(lpath, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8000bb25dd413de — Filesystem access.
pkgs/python/[email protected]/fsspec/spec.py:1029 
        with open(lpath, "rb") as f1:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fd8f2abb0df16c9 — Filesystem access.
pkgs/python/[email protected]/fsspec/utils.py:629 
        with open(fd, mode) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

g2pkk

python dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #7a7d1212d1de88fd — Filesystem access.
pkgs/python/[email protected]/g2pkk/g2pkk.py:85 
        with open(self.idioms_path, 'r', encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aaa7f2085cc08693 — Filesystem access.
pkgs/python/[email protected]/g2pkk/utils.py:138 
    with open(os.path.dirname(os.path.abspath(__file__)) + '/table.csv', 'r', encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f6cbbf194dd2128 — Filesystem access.
pkgs/python/[email protected]/g2pkk/utils.py:234 
    text = open('rules.txt', 'r', encoding='utf8').read().splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca2cf29cb16d0afb — Filesystem access.
pkgs/python/[email protected]/g2pkk/utils.py:250 
    with open(os.path.dirname(os.path.abspath(__file__)) + '/rules.txt', 'r', encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac1284ebc4a94a68 — Filesystem access.
pkgs/python/[email protected]/setup.py:3 
with open("README.md", mode="r", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gruut

python dependency
expand_more 11 low-confidence finding(s)
low env_fs dependency Excluded from app score #382ed566b86c2b06 — Filesystem access.
pkgs/python/[email protected]/gruut/__init__.py:20 
__version__ = (_DIR / "VERSION").read_text(encoding="utf-8").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56b334959f3c8ad6 — Filesystem access.
pkgs/python/[email protected]/gruut/corpus2db.py:28 
    with open(args.corpus, "r", encoding="utf-8") as corpus_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b28a9f70a8f91753 — Filesystem access.
pkgs/python/[email protected]/gruut/g2p.py:185 
    with open(corpus_path, "r", encoding="utf-8") as corpus:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d21f458b2ec2e70 — Filesystem access.
pkgs/python/[email protected]/gruut/lexicon2db.py:67 
        lexicon_file = open(args.lexicon, "r", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67edecda21f86c51 — Filesystem access.
pkgs/python/[email protected]/gruut/pos.py:193 
    with open(conllu_path, "r", encoding="utf-8") as conllu_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1528c9c2d50da600 — Filesystem access.
pkgs/python/[email protected]/gruut/pos.py:267 
    with open(args.conllu, "r", encoding="utf-8") as conllu_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a551f61a6c9f9137 — Filesystem access.
pkgs/python/[email protected]/gruut/pos.py:321 
    with open(args.conllu, "r", encoding="utf-8") as conllu_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15c3ff483d432df5 — Environment-variable access.
pkgs/python/[email protected]/gruut/utils.py:91 
    maybe_config_home = os.environ.get("XDG_CONFIG_HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86e454e31a79b3e9 — Filesystem access.
pkgs/python/[email protected]/setup.py:16 
    long_description = readme_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a571a5d37fd8c432 — Filesystem access.
pkgs/python/[email protected]/setup.py:21 
    with open(requirements_path, "r", encoding="utf-8") as requirements_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f11f0a822a11c10 — Filesystem access.
pkgs/python/[email protected]/setup.py:25 
with open(version_path, "r", encoding="utf-8") as version_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

hangul_romanize

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #30f548dfb86002ad — Filesystem access.
pkgs/python/[email protected]/setup.py:7 
    with open('hangul_romanize/version.txt', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80ff8a3e1267331f — Filesystem access.
pkgs/python/[email protected]/setup.py:13 
        with open('README.rst', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jamo

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #d7b9f2cf788fd460 — Filesystem access.
pkgs/python/[email protected]/jamo/jamo.py:24 
with open(os.path.join(_ROOT, 'data', "U+11xx.json"), 'r') as namedata:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9b7e464c8937a7c — Filesystem access.
pkgs/python/[email protected]/jamo/jamo.py:27 
with open(os.path.join(_ROOT, 'data', "U+31xx.json"), 'r') as namedata:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5efc5321a0e1002b — Filesystem access.
pkgs/python/[email protected]/setup.py:11 
with open('README.rst', encoding='utf8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jieba

python dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #b00faacad73b824e — Filesystem access.
pkgs/python/[email protected]/jieba/__init__.py:135 
                    with open(cache_file, 'rb') as cf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85458b702dc34bc1 — Filesystem access.
pkgs/python/[email protected]/jieba/__init__.py:378 
            return open(self.dictionary, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53f91ee8beaa2424 — Filesystem access.
pkgs/python/[email protected]/jieba/__init__.py:398 
            f = open(f, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c48a160b94c02ad — Filesystem access.
pkgs/python/[email protected]/jieba/__main__.py:43 
fp = open(args.filename, 'r') if args.filename else sys.stdin

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f472e90d9a949cb9 — Filesystem access.
pkgs/python/[email protected]/jieba/_compat.py:23 
    get_module_res = lambda *res: open(os.path.normpath(os.path.join(
        os.getcwd(), os.path.dirname(__file__), *res)), 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2afaf0b9ddff91a8 — Filesystem access.
pkgs/python/[email protected]/jieba/analyse/tfidf.py:27 
        content = open(abs_path, 'rb').read().decode('utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0121c830d2d8da33 — Filesystem access.
pkgs/python/[email protected]/jieba/analyse/tfidf.py:47 
            content = open(new_idf_path, 'rb').read().decode('utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3706c8d01dfbc48b — Filesystem access.
pkgs/python/[email protected]/jieba/lac_small/reader_small.py:33 
    for line in io.open(dict_path, "r", encoding='utf8'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

librosa

python dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #f3a132d03e0f87af — Environment-variable access.
pkgs/python/[email protected]/librosa/_cache.py:85 
    os.environ.get("LIBROSA_CACHE_DIR", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e56b3905f8ec56c2 — Environment-variable access.
pkgs/python/[email protected]/librosa/_cache.py:86 
    mmap_mode=os.environ.get("LIBROSA_CACHE_MMAP", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3fab3f78190d292 — Environment-variable access.
pkgs/python/[email protected]/librosa/_cache.py:87 
    compress=os.environ.get("LIBROSA_CACHE_COMPRESS", False),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #adac1454fd929d3b — Environment-variable access.
pkgs/python/[email protected]/librosa/_cache.py:88 
    verbose=int(os.environ.get("LIBROSA_CACHE_VERBOSE", 0)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #781df8caa253a597 — Environment-variable access.
pkgs/python/[email protected]/librosa/_cache.py:89 
    level=int(os.environ.get("LIBROSA_CACHE_LEVEL", 10)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7551bc52f822778 — Environment-variable access.
pkgs/python/[email protected]/librosa/util/files.py:32 
__data_path = os.environ.get("LIBROSA_DATA_DIR", pooch.os_cache("librosa"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04b7452533e98ddd — Filesystem access.
pkgs/python/[email protected]/librosa/util/files.py:176 
    with open(license_file, "r") as fdesc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #676d4c1e285fc972 — Filesystem access.
pkgs/python/[email protected]/librosa/util/files.py:326 
    with open(version_data, "rb") as fdesc:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mutagen

python dependency
expand_more 10 low-confidence finding(s)
low env_fs dependency Excluded from app score #75ece6f3679f0bea — Filesystem access.
pkgs/python/[email protected]/mutagen/_tools/mid3iconv.py:122 
        with open(filename, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90e7d713a867c4d6 — Filesystem access.
pkgs/python/[email protected]/mutagen/_tools/mid3v2.py:258 
                            with open(fn, "rb") as h:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #827228d717b3c01c — Filesystem access.
pkgs/python/[email protected]/mutagen/_tools/moggsplit.py:48 
            with open(filename, "rb") as fileobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #717a11f3e619096e — Filesystem access.
pkgs/python/[email protected]/mutagen/_tools/moggsplit.py:50 
                    m3u = open(format["base"] + ".m3u", "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cdede64e9e95834 — Filesystem access.
pkgs/python/[email protected]/mutagen/_tools/moggsplit.py:63 
                            new_fileobj = open(new_filename, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de178d5c454bdf89 — Filesystem access.
pkgs/python/[email protected]/mutagen/_util.py:251 
            fileobj = open(filename, "rb+" if writable else "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65e91204209ab0e4 — Filesystem access.
pkgs/python/[email protected]/mutagen/_util.py:260 
                    with open(filename, "rb") as fileobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61f73b7f65f8d81c — Filesystem access.
pkgs/python/[email protected]/mutagen/_util.py:268 
                    fileobj = open(filename, "wb+")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d5abd7736e1c9b7 — Filesystem access.
pkgs/python/[email protected]/mutagen/_util.py:281 
                    with open(filename, "wb") as fileobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2263e89907d06a62 — Filesystem access.
pkgs/python/[email protected]/setup.py:246 
    with open('README.rst', encoding='utf-8') as h:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

nltk

python dependency
expand_more 90 low-confidence finding(s)
low env_fs dependency Excluded from app score #b1e862490e36ed83 — Filesystem access.
pkgs/python/[email protected]/nltk/__init__.py:33 
    with open(version_file) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73954dfe951c2ace — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:798 
            with open(filename, "wb") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4c31bfb60b50383 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:815 
        with open(filename, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ed887a44d6c15ee — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2272 
            with open(filename, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6575ece5bae4cb1 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2295 
            with open(filename, "wb") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2fc360159744f00 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2310 
                with open(filename, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee3976f61123be63 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2313 
                with open(filename) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4195be89127301a0 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2327 
                with open(filename, "wb") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d22540102244a784 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chartparser_app.py:2330 
                with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b8bae9581bee359 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chunkparser_app.py:1394 
        with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cbb45ad90baf8635 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chunkparser_app.py:1415 
        with open(filename) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da42ddf88aeeef16 — Filesystem access.
pkgs/python/[email protected]/nltk/app/chunkparser_app.py:1430 
        with open(filename, "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1edbc159ae9ef533 — Filesystem access.
pkgs/python/[email protected]/nltk/app/wordnet_app.py:138 
                    with open(usp) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f07ccaecbb12efd — Filesystem access.
pkgs/python/[email protected]/nltk/app/wordnet_app.py:252 
            logfile = open(logfilename, "a", 1)  # 1 means 'line buffering'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36e775d3b7330e47 — Filesystem access.
pkgs/python/[email protected]/nltk/chunk/named_entity.py:235 
    with open(annfile) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e31e00d0afb90baf — Filesystem access.
pkgs/python/[email protected]/nltk/chunk/named_entity.py:247 
    with open(textfile) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6cdf74ff1c329279 — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1440 
        with open(trainfile_name, "w") as trainfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d892e495b33fd8b5 — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1542 
        with open(weightfile_name) as weightfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a6945be47bffa73 — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1596 
    with open(f"{tab_dir}/weights.txt", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #282e03f57b6cf553 — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1598 
    with open(f"{tab_dir}/mapping.tab", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abb8f7da5408f73e — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1600 
    with open(f"{tab_dir}/labels.txt", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43ddc79b03f5a4d4 — Filesystem access.
pkgs/python/[email protected]/nltk/classify/maxent.py:1602 
    with open(f"{tab_dir}/alwayson.tab", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #230e8d252f51c47b — Environment-variable access.
pkgs/python/[email protected]/nltk/classify/senna.py:70 
            senna_env = environ.get("SENNA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #621b177909155da7 — Environment-variable access.
pkgs/python/[email protected]/nltk/classify/weka.py:51 
        if "WEKAHOME" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd051d912f14d62c — Environment-variable access.
pkgs/python/[email protected]/nltk/classify/weka.py:52 
            searchpath.insert(0, os.environ["WEKAHOME"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f37b6df53055d16f — Filesystem access.
pkgs/python/[email protected]/nltk/classify/weka.py:283 
            outfile = open(outfile, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2dd23a4ce87055ca — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/crubadan.py:78 
        with open(mapper_file, encoding="utf-8") as raw:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fba581eae7404873 — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/crubadan.py:97 
        with open(ngram_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89df54c6fa3c597f — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/ipipan.py:191 
        with open(f) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c0c4256c64e3947 — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/lin.py:43 
            with open(path) as lin_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ac895d790922008 — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/nkjp.py:283 
            fr = open(self.read_file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #071fe0f3becd2149 — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/pl196x.py:110 
            with open(self._textids) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d28ebbc6686b97b — Filesystem access.
pkgs/python/[email protected]/nltk/corpus/reader/xmldocs.py:168 
            with open(fileid, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f56bb8d32bf07e44 — Environment-variable access.
pkgs/python/[email protected]/nltk/data.py:133 
        os.path.join(os.environ.get("APPDATA", "C:\\"), "nltk_data"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #787d914609344295 — Environment-variable access.
pkgs/python/[email protected]/nltk/data.py:152 
_paths_from_env = os.environ.get("NLTK_DATA", "").split(os.pathsep)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0facba5a8f8aaf7 — Environment-variable access.
pkgs/python/[email protected]/nltk/data.py:154 
if "APPENGINE_RUNTIME" not in os.environ and os.path.expanduser("~/") != "~/":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #540fbe58db4b7b18 — Environment-variable access.
pkgs/python/[email protected]/nltk/downloader.py:1339 
        if "APPENGINE_RUNTIME" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96519936e6c35944 — Environment-variable access.
pkgs/python/[email protected]/nltk/downloader.py:1349 
        if os.name == "nt" and "APPDATA" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edc8890bccc6efa0 — Environment-variable access.
pkgs/python/[email protected]/nltk/downloader.py:1350 
            homedir = os.environ["APPDATA"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b2beeab99383d93 — Environment-variable access.
pkgs/python/[email protected]/nltk/downloader.py:1385 
            os.environ.get("NLTK_DOWNLOADER_FORCE_INTERACTIVE_SHELL", "false").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4da2db68e469b81e — Filesystem access.
pkgs/python/[email protected]/nltk/downloader.py:2527 
        with open(file, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #300ac1fff4f40aa8 — Filesystem access.
pkgs/python/[email protected]/nltk/downloader.py:2548 
        with open(file, "rb") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4883ce8952a7cc1d — Environment-variable access.
pkgs/python/[email protected]/nltk/downloader.py:3006 
        default=os.environ.get("NLTK_DOWNLOAD_URL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6547d038ec351511 — Filesystem access.
pkgs/python/[email protected]/nltk/draw/util.py:1870 
        with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c6b9bb112829f6b — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:625 
        if env_var in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f12b1ff2ba530b20 — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:628 
                yield os.environ[env_var]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f04155386885a5c2 — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:630 
            for env_dir in os.environ[env_var].split(os.pathsep):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a699da4122c68b0 — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:835 
        if env_var in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cbff29e8e57fcb39 — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:837 
                classpath = os.environ["CLASSPATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8497ff1ed8103b0 — Environment-variable access.
pkgs/python/[email protected]/nltk/internals.py:875 
                jar_env = os.path.expanduser(os.environ[env_var])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #504a9079fafc7baf — Filesystem access.
pkgs/python/[email protected]/nltk/metrics/agreement.py:460 
    with open(options.file) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #7d6a7c08258464aa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/nltk/parse/corenlp.py:266 
        response = self.session.post(
            self.url,
            params={"properties": json.dumps(default_properties)},
            data=data.encode(self.encoding),
            headers={"Content-Type": f"text/plain; charset={self.encoding}"},
            timeout=timeout,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #83922640f0e9e00d — Filesystem access.
pkgs/python/[email protected]/nltk/parse/malt.py:218 
                with open(output_file_name) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81ae260d47b89f04 — Filesystem access.
pkgs/python/[email protected]/nltk/parse/transitionparser.py:551 
            pickle.dump(model, open(modelfile, "wb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9cb4414d42ef664b — Filesystem access.
pkgs/python/[email protected]/nltk/parse/transitionparser.py:570 
        with open(modelFile, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c338c830192da7a — Environment-variable access.
pkgs/python/[email protected]/nltk/pathsec.py:41 
    env_paths = os.environ.get("NLTK_DATA", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98416271f6ac62f2 — Filesystem access.
pkgs/python/[email protected]/nltk/sem/chat80.py:677 
        with open("chat_pnames.cfg", "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de99640642bb7812 — Filesystem access.
pkgs/python/[email protected]/nltk/sentiment/sentiment_analyzer.py:190 
        with open(filename, "wb") as storage_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9c51dd2d9f8ddda — Filesystem access.
pkgs/python/[email protected]/nltk/tag/perceptron.py:108 
        with open(path, "w") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #748830eac483d169 — Filesystem access.
pkgs/python/[email protected]/nltk/tag/perceptron.py:113 
        with open(path) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c17536b3d9620b1 — Filesystem access.
pkgs/python/[email protected]/nltk/tag/perceptron.py:272 
            with open(path_join(loc, json_file), "w") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7add4887e410deb — Filesystem access.
pkgs/python/[email protected]/nltk/tbl/demo.py:249 
            with open(cache_baseline_tagger, "wb") as print_rules:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c662a76f420bc4d7 — Filesystem access.
pkgs/python/[email protected]/nltk/tbl/demo.py:256 
        with open(cache_baseline_tagger, "rb") as print_rules:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f05ebba3d66f98dd — Filesystem access.
pkgs/python/[email protected]/nltk/tbl/demo.py:317 
        with open(error_output, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab7ed0f7222c881c — Filesystem access.
pkgs/python/[email protected]/nltk/tbl/demo.py:325 
        with open(serialize_output, "wb") as print_rules:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92ea9e54386128e7 — Filesystem access.
pkgs/python/[email protected]/nltk/tbl/demo.py:328 
        with open(serialize_output, "rb") as print_rules:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #695c168636f529b6 — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/punkt.py:1611 
        with open("/tmp/punkt.new", "w") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #354f1c4c38abfd2f — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/punkt.py:1806 
    with open(f"{dir}/collocations.tab", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bcb362e33b0614c — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/punkt.py:1808 
    with open(f"{dir}/sent_starters.txt", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7a19c65c67f74d7 — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/punkt.py:1810 
    with open(f"{dir}/abbrev_types.txt", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4ef32de02c2650c — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/punkt.py:1812 
    with open(f"{dir}/ortho_context.tab", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #060ffb4086db3061 — Environment-variable access.
pkgs/python/[email protected]/nltk/tokenize/stanford_segmenter.py:131 
        if os.environ.get("STANFORD_SEGMENTER"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee3b1d6c6a43cfad — Environment-variable access.
pkgs/python/[email protected]/nltk/tokenize/stanford_segmenter.py:132 
            search_path = {os.path.join(os.environ.get("STANFORD_SEGMENTER"), "data")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f99a1a6069c37e2 — Filesystem access.
pkgs/python/[email protected]/nltk/tokenize/stanford_segmenter.py:291 
        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff68ae4de6aea17a — Environment-variable access.
pkgs/python/[email protected]/nltk/tokenize/stanford_segmenter.py:301 
            for value in os.environ.get("NLTK_SEGMENTER_ALLOW_SHA256", "").split(",")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #264c836e4433d9c2 — Filesystem access.
pkgs/python/[email protected]/nltk/twitter/common.py:142 
        outf = open(outfile, "w", newline="", encoding=encoding, errors=errors)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0dd9cab10f41c11a — Filesystem access.
pkgs/python/[email protected]/nltk/twitter/twitterclient.py:524 
                self.output = open(self.fname, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c4bea188a4d0684 — Environment-variable access.
pkgs/python/[email protected]/nltk/twitter/util.py:39 
            self.twitter_dir = os.environ["TWITTER"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02b3a5389858c0e6 — Filesystem access.
pkgs/python/[email protected]/nltk/twitter/util.py:86 
        with open(self.creds_fullpath) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1e86456dc612dbe — Filesystem access.
pkgs/python/[email protected]/nltk/twitter/util.py:133 
    with open(creds_file, "a") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14e15a951103d3ec — Filesystem access.
pkgs/python/[email protected]/setup.py:25 
with open(version_file) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #315cb674cd3cef03 — Filesystem access.
pkgs/python/[email protected]/tools/find_deprecated.py:127 
                s = open(os.path.join(root, filename)).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #db49b57705b0082b — Filesystem access.
pkgs/python/[email protected]/tools/find_deprecated.py:160 
            print_deprecated_uses_in(open(path).readline, path, dep_files, dep_names, 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #870fa7bfe30d005d — Filesystem access.
pkgs/python/[email protected]/tools/find_deprecated.py:162 
            for example in DocTestParser().get_examples(open(path).read()):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #a5acff62ed9994cd — Filesystem access.
pkgs/python/[email protected]/tools/global_replace.py:27 
        s = open(file, "rb").read().decode("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #e2820adbf2047e4c — Filesystem access.
pkgs/python/[email protected]/tools/global_replace.py:29 
        out = open(file, "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #7aa323148a724a58 — Filesystem access.
pkgs/python/[email protected]/tools/huggingface/push_stopwords.py:185 
    open(readme_path, "w").write(readme)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebac90ea863a6082 — Filesystem access.
pkgs/python/[email protected]/web/conf.py:65 
    with open(
        os.path.join(web_folder, "_templates", "doctest.rst"), encoding="utf8"
    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e71a64ab43616f2 — Filesystem access.
pkgs/python/[email protected]/web/conf.py:88 
    with open(os.path.join(web_folder, "team", "team.json"), encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4b3421c86b05d64 — Filesystem access.
pkgs/python/[email protected]/web/conf.py:93 
    with open(
        os.path.join(web_folder, "_templates", "team.html"), encoding="utf8"
    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

num2words

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #41d6b9d6ad837544 — Filesystem access.
pkgs/python/[email protected]/setup.py:42 
LONG_DESC = open('README.rst', 'rt', encoding="utf-8").read() + '\n\n' + \

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4b654b3c8b2121f — Filesystem access.
pkgs/python/[email protected]/setup.py:43 
            open('CHANGES.rst', 'rt', encoding="utf-8").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98165e2e8d2099a7 — Filesystem access.
pkgs/python/[email protected]/setup.py:51 
    with open(fname, 'r', encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

numba

python dependency
expand_more 69 low-confidence finding(s)
low env_fs tooling reachable #5b7e0f7877ee0a96 — Filesystem access.
pkgs/python/[email protected]/docs/dagmap/render.py:16 
    with open(filename, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #82e315a13cc99781 — Filesystem access.
pkgs/python/[email protected]/docs/dagmap/render.py:77 
    with open(args.output, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #9243456680377b91 — Environment-variable access.
pkgs/python/[email protected]/docs/gh-pages.py:42 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #96cc2740d7360500 — Environment-variable access.
pkgs/python/[email protected]/docs/source/conf.py:31 
on_rtd = os.environ.get('READTHEDOCS') == 'True'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #482d2b3c05d3fbe7 — Filesystem access.
pkgs/python/[email protected]/numba/core/annotations/type_annotations.py:181 
        with open(template_filename, 'r') as template:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d667b0e7805b791 — Filesystem access.
pkgs/python/[email protected]/numba/core/caching.py:514 
            with open(self._index_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48a6ee1309a8af9b — Filesystem access.
pkgs/python/[email protected]/numba/core/caching.py:543 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54cdfd49dfc66794 — Filesystem access.
pkgs/python/[email protected]/numba/core/caching.py:573 
            with open(tmpname, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0009021e1f31f797 — Filesystem access.
pkgs/python/[email protected]/numba/core/config.py:57 
        f = open('/proc/cpuinfo', 'r')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acd7aab8ef422a35 — Filesystem access.
pkgs/python/[email protected]/numba/core/config.py:102 
                with open(_config_fname, 'rt') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2945c2c1c80ba0ee — Environment-variable access.
pkgs/python/[email protected]/numba/core/config.py:109 
        for name, value in os.environ.items():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acd02a28faed47d6 — Environment-variable access.
pkgs/python/[email protected]/numba/core/config.py:452 
        RUNNING_UNDER_PROFILER = 'VS_PROFILER' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1dc78506f67e0c6 — Environment-variable access.
pkgs/python/[email protected]/numba/core/errors.py:182 
    if os.environ.get('NUMBA_DISABLE_ERROR_MESSAGE_HIGHLIGHTING', None):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c46b52fc2f9f697b — Filesystem access.
pkgs/python/[email protected]/numba/core/typed_passes.py:206 
            with open(config.HTML, 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6928bc98fa4aa3bc — Filesystem access.
pkgs/python/[email protected]/numba/cuda/codegen.py:27 
        with open(fname, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ce15b08f5c60b03 — Environment-variable access.
pkgs/python/[email protected]/numba/cuda/cuda_paths.py:126 
    cuda_home = os.environ.get('CUDA_HOME')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67962a192dc85616 — Environment-variable access.
pkgs/python/[email protected]/numba/cuda/cuda_paths.py:129 
        cuda_home = os.environ.get('CUDA_PATH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #372826b0e6eb325f — Filesystem access.
pkgs/python/[email protected]/numba/cuda/cudadrv/libs.py:37 
    with open(get_libdevice(arch), 'rb') as bcfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc09dcf89072b958 — Environment-variable access.
pkgs/python/[email protected]/numba/cuda/testing.py:90 
    return unittest.skipIf(os.environ.get('CUDA_MEMCHECK') is not None, reason)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0afd4e09f9d297b5 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/appdirs.py:89 
        path = os.getenv('XDG_DATA_HOME', os.path.expanduser("~/.local/share"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ade3dca8ce999ad — Environment-variable access.
pkgs/python/[email protected]/numba/misc/appdirs.py:144 
        path = os.getenv('XDG_DATA_DIRS',
                         os.pathsep.join(['/usr/local/share', '/usr/share']))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ea00ea81db373d1 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/appdirs.py:195 
        path = os.getenv('XDG_CONFIG_HOME', os.path.expanduser("~/.config"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dc84f017a9621fc — Environment-variable access.
pkgs/python/[email protected]/numba/misc/appdirs.py:240 
        path = os.getenv('XDG_CONFIG_DIRS', '/etc/xdg')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c377b4ac97bd588e — Environment-variable access.
pkgs/python/[email protected]/numba/misc/appdirs.py:303 
        path = os.getenv('XDG_CACHE_HOME', os.path.expanduser('~/.cache'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52d11b254a916e83 — Filesystem access.
pkgs/python/[email protected]/numba/misc/gdb_hook.py:43 
        with open(ptrace_scope_file, 'rt') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f62e41bc7d6b2da — Filesystem access.
pkgs/python/[email protected]/numba/misc/help/inspector.py:393 
        with open(filename + '.html', 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d336fb301ef1cab — Filesystem access.
pkgs/python/[email protected]/numba/misc/help/inspector.py:397 
        with open(filename + '.rst', 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb75d2542cc4d176 — Filesystem access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:54 
        with open(args.sys_json[0], 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d9cc24c56bd348a — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:58 
    os.environ['NUMBA_DUMP_ANNOTATION'] = str(int(args.annotate))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #949d46b5a7784a4b — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:64 
        os.environ['NUMBA_DUMP_HTML'] = str(args.annotate_html[0])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de7ab9587121a7d7 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:65 
    os.environ['NUMBA_DUMP_LLVM'] = str(int(args.dump_llvm))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad806abad87fe5a3 — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:66 
    os.environ['NUMBA_DUMP_OPTIMIZED'] = str(int(args.dump_optimized))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d725033bfd9c999b — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_entry.py:67 
    os.environ['NUMBA_DUMP_ASSEMBLY'] = str(int(args.dump_assembly))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd1ded931b4a0f23 — Filesystem access.
pkgs/python/[email protected]/numba/misc/numba_sysinfo.py:192 
                    with open(cmd[0], 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33defe01ea2209cf — Environment-variable access.
pkgs/python/[email protected]/numba/misc/numba_sysinfo.py:298 
        _numba_env_vars: {k: v for (k, v) in os.environ.items()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5dee5ded50e9c4a7 — Environment-variable access.
pkgs/python/[email protected]/numba/np/ufunc/parallel.py:671 
_DYLD_WORKAROUND_SET = 'NUMBA_DYLD_WORKAROUND' in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c6de886c1d1856b — Environment-variable access.
pkgs/python/[email protected]/numba/np/ufunc/parallel.py:672 
_DYLD_WORKAROUND_VAL = int(os.environ.get('NUMBA_DYLD_WORKAROUND', 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #083fb705c9bc9f2c — Filesystem access.
pkgs/python/[email protected]/numba/pycc/compiler.py:196 
        with open(output, 'wb') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d523e75ebac4ecd — Filesystem access.
pkgs/python/[email protected]/numba/pycc/compiler.py:202 
        with open(output, 'wb') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0e2554ebc9b5772 — Filesystem access.
pkgs/python/[email protected]/numba/pycc/compiler.py:214 
        with open(fname + '.h', 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0170dbff97c2426 — Filesystem access.
pkgs/python/[email protected]/numba/pycc/decorators.py:43 
        with open(ifile) as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70d92fe56631ad94 — Filesystem access.
pkgs/python/[email protected]/numba/pycc/platform.py:35 
        ntf = open(os.path.join(tmpdir, "temp%s" % suffix), 'wt')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cba1c51f1c923c89 — Environment-variable access.
pkgs/python/[email protected]/numba/pycc/platform.py:218 
        sh = os.environ.get('SHELL', '/bin/sh')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #bc2610531b9755e7 — Filesystem access.
pkgs/python/[email protected]/numba/scripts/generate_lower_listing.py:164 
        with open(path, 'w') as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb802e4e14d860c2 — Filesystem access.
pkgs/python/[email protected]/numba/testing/_runtests.py:92 
        with open(self.cache_filename, 'w') as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7cc1cfba57315aeb — Filesystem access.
pkgs/python/[email protected]/numba/testing/_runtests.py:108 
            fobj = open(self.cache_filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d6e8c460e901488 — Filesystem access.
pkgs/python/[email protected]/numba/testing/notebook.py:42 
        with open(notebook) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94fe6a96ee714ecf — Environment-variable access.
pkgs/python/[email protected]/runtests.py:5 
if bool(os.environ.get('NUMBA_USE_TYPEGUARD')):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43cfd91715cc751f — Environment-variable access.
pkgs/python/[email protected]/runtests.py:12 
os.environ['NUMBA_DEVELOPER_MODE'] = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52583247057f1897 — Environment-variable access.
pkgs/python/[email protected]/setup.py:215 
        path2check += [os.getenv(n, '') for n in ['CONDA_PREFIX', 'PREFIX']]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b8124de2b1d7f09 — Environment-variable access.
pkgs/python/[email protected]/setup.py:263 
    if os.getenv("NUMBA_DISABLE_TBB"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d589efbe2850b602 — Environment-variable access.
pkgs/python/[email protected]/setup.py:267 
        tbb_root = os.getenv('TBBROOT')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3c877f1b817de37 — Environment-variable access.
pkgs/python/[email protected]/setup.py:297 
    if os.getenv('NUMBA_DISABLE_OPENMP'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc9276c8336e44b2 — Filesystem access.
pkgs/python/[email protected]/setup.py:409 
with open('README.rst') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39aa885bcbbcdd2e — Filesystem access.
pkgs/python/[email protected]/versioneer.py:584 
        f = open(versionfile_abs, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cffbf087f9b44f1 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:739 
        f = open(".gitattributes", "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #466b54d6e14223b4 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:748 
        f = open(".gitattributes", "a+")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #103f2538d1d3b820 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:785 
        with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efd4f01ce4e3efd7 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:800 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92c4a47f5c6915bf — Filesystem access.
pkgs/python/[email protected]/versioneer.py:906 
            with open(target_versionfile, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59766f50677f6db6 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:918 
            with open(target_versionfile, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e616ea4c99dc09fd — Filesystem access.
pkgs/python/[email protected]/versioneer.py:923 
            with open(versionfile_source, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a9fec9e0e204f0a — Filesystem access.
pkgs/python/[email protected]/versioneer.py:948 
        with open(target_versionfile, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95b0430f63ecfcdc — Filesystem access.
pkgs/python/[email protected]/versioneer.py:972 
        with open(versionfile_source, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #970d73312383680f — Filesystem access.
pkgs/python/[email protected]/versioneer.py:984 
                with open(ipy, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79fa6a44765e13c9 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:990 
                with open(ipy, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b244e4b42539babf — Filesystem access.
pkgs/python/[email protected]/versioneer.py:1005 
            with open(manifest_in, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3c9be3d8ce00ba5 — Filesystem access.
pkgs/python/[email protected]/versioneer.py:1018 
            with open(manifest_in, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f5a476c4cf9164a — Filesystem access.
pkgs/python/[email protected]/versioneer.py:1025 
            with open(manifest_in, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

packaging

python dependency
expand_more 3 low-confidence finding(s)
low env_fs tooling reachable #b176c76d785aa637 — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:11 
with open(os.path.join(_BASE_DIR, "src", "packaging", "__init__.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b81ab8bb479a441c — Filesystem access.
pkgs/python/[email protected]/src/packaging/_manylinux.py:34 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c997582ac9778b9b — Filesystem access.
pkgs/python/[email protected]/src/packaging/_musllinux.py:46 
        with open(executable, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pandas

python dependency
expand_more 28 low-confidence finding(s)
low env_fs dependency Excluded from app score #d1f45bf6892bc7b5 — Filesystem access.
pkgs/python/[email protected]/generate_pxi.py:8 
    with open(pxifile, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4db9baf3b113c3f — Filesystem access.
pkgs/python/[email protected]/generate_pxi.py:12 
    with open(outfile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f320b9c6238a83eb — Environment-variable access.
pkgs/python/[email protected]/generate_version.py:25 
    if os.environ.get("MESON_DIST_ROOT"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88969a2165409420 — Environment-variable access.
pkgs/python/[email protected]/generate_version.py:26 
        path = os.path.join(os.environ.get("MESON_DIST_ROOT"), path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4be6ac245455ab7f — Filesystem access.
pkgs/python/[email protected]/generate_version.py:27 
    with open(path, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bccd1c6594a36b5 — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:76 
                    del os.environ["TZ"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a98899f0c32db1f0 — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:80 
                os.environ["TZ"] = tz

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d62e30509c75c958 — Environment-variable access.
pkgs/python/[email protected]/pandas/_testing/contexts.py:85 
    orig_tz = os.environ.get("TZ")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d90975a9ff6eec9 — Filesystem access.
pkgs/python/[email protected]/pandas/_version.py:159 
        with open(versionfile_abs, encoding="utf-8") as fobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5be9ab5c3e23b1eb — Environment-variable access.
pkgs/python/[email protected]/pandas/_version.py:264 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d4cd6d16e2e136e — Environment-variable access.
pkgs/python/[email protected]/pandas/compat/__init__.py:154 
    return os.environ.get("PANDAS_CI", "0") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1832266242fefd1 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:425 
        if os.environ.get("PANDAS_COPY_ON_WRITE", "0") == "warn"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #432091d9d7382f12 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:426 
        else os.environ.get("PANDAS_COPY_ON_WRITE", "1") == "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdae56c4fd3d3b3b — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:878 
        False if os.environ.get("PANDAS_FUTURE_INFER_STRING", "1") == "0" else True,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c3e181796d19ad1 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:895 
        os.environ.get("PANDAS_FUTURE_DISTINGUISH_NAN_AND_NA", "0") == "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e5a06939352d375 — Environment-variable access.
pkgs/python/[email protected]/pandas/core/config_init.py:906 
        False if os.environ.get("PANDAS_FUTURE_PYTHON_SCALARS", "0") == "0" else True,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d13024b86ccdbedf — Filesystem access.
pkgs/python/[email protected]/pandas/core/series.py:1573 
            with open(buf, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ca72eab88bf3cce — Environment-variable access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:74 
HAS_DISPLAY = os.getenv("DISPLAY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #986c779f411152e6 — Filesystem access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:302 
        with open("/dev/clipboard", "w", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16178ce182ca87c5 — Filesystem access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:306 
        with open("/dev/clipboard", encoding="utf-8") as fd:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed96ae0fe444fa39 — Environment-variable access.
pkgs/python/[email protected]/pandas/io/clipboard/__init__.py:569 
        if os.environ.get("WAYLAND_DISPLAY") and _executable_exists("wl-copy"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd058f21dc17f53e — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:930 
            handle = open(
                handle,
                ioargs.mode,
                encoding=ioargs.encoding,
                errors=errors,
                newline="",
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #350a0ef9879d4d3c — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:939 
            handle = open(handle, ioargs.mode)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40ac8d39f8585027 — Filesystem access.
pkgs/python/[email protected]/pandas/io/common.py:1192 
        handle = open(handle, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e39bebab1ec50582 — Filesystem access.
pkgs/python/[email protected]/pandas/io/formats/format.py:1076 
        with open(buf, "w", encoding=encoding, newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee20b8a54c81c1e1 — Environment-variable access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:57 
        "LC_ALL": os.environ.get("LC_ALL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa7eaade55fcb96d — Environment-variable access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:58 
        "LANG": os.environ.get("LANG"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91b77993fd5d9502 — Filesystem access.
pkgs/python/[email protected]/pandas/util/_print_versions.py:148 
            with open(as_json, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pypinyin

python dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #6f40f810ac473eb7 — Environment-variable access.
pkgs/python/[email protected]/pypinyin/constants.py:15 
if os.environ.get('PYPINYIN_NO_PHRASES'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbbd677719068496 — Environment-variable access.
pkgs/python/[email protected]/pypinyin/constants.py:25 
if not os.environ.get('PYPINYIN_NO_DICT_COPY'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9295cd1690bffde8 — Filesystem access.
pkgs/python/[email protected]/pypinyin/phrases_dict.py:16 
    with open(_json_path, encoding='utf8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3edcdfe851e964cc — Filesystem access.
pkgs/python/[email protected]/pypinyin/pinyin_dict.py:15 
    with open(_json_path, encoding='utf8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efb45f47c34fc601 — Filesystem access.
pkgs/python/[email protected]/setup.py:41 
    with open(os.path.join(current_dir, 'pypinyin/__init__.py'),
              encoding='utf8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb5370f58e750067 — Filesystem access.
pkgs/python/[email protected]/setup.py:49 
    with open(os.path.join(current_dir, 'README.rst'),
              encoding='utf8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pyyaml

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #ceaf1af6d5553d62 — Environment-variable access.
pkgs/python/[email protected]/setup.py:72 
os.environ['SETUPTOOLS_USE_DISTUTILS'] = 'local'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8dd882fa0899b6d — Environment-variable access.
pkgs/python/[email protected]/setup.py:81 
if 'sdist' in sys.argv or os.environ.get('PYYAML_FORCE_CYTHON') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6faac982b21b26b3 — Environment-variable access.
pkgs/python/[email protected]/setup.py:160 
            with_ext = getattr(self, ext.attr_name) or os.environ.get('PYYAML_FORCE_{0}'.format(ext.feature_name.upper()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

scikit-learn

python dependency
expand_more 50 low-confidence finding(s)
low env_fs dependency Excluded from app score #d77da68d03fa8b4f — Environment-variable access.
pkgs/python/[email protected]/doc/conf.py:122 
if os.environ.get("NO_MATHJAX"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #488f1cc93b43ca8b — Filesystem access.
pkgs/python/[email protected]/doc/conf.py:622 
            with open(readme, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7c1059930a83e72 — Filesystem access.
pkgs/python/[email protected]/doc/conf.py:819 
    with open(searchindex_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1110668ade48d5f7 — Filesystem access.
pkgs/python/[email protected]/doc/conf.py:825 
    with open(searchindex_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa0f5c1dffcfd569 — Environment-variable access.
pkgs/python/[email protected]/doc/conf.py:884 
if os.environ.get("SKLEARN_WARNINGS_AS_ERRORS", "0") != "0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #918527a15e24e705 — Environment-variable access.
pkgs/python/[email protected]/doc/conf.py:975 
github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5bf3d580a0cf700 — Environment-variable access.
pkgs/python/[email protected]/doc/conftest.py:49 
    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #2ac33be96212bcbb — Filesystem access.
pkgs/python/[email protected]/examples/applications/plot_out_of_core_classification.py:171 
        assert sha256(archive_path.read_bytes()).hexdigest() == ARCHIVE_SHA256

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #04532779acf2094c — Filesystem access.
pkgs/python/[email protected]/examples/applications/plot_out_of_core_classification.py:180 
        for doc in parser.parse(open(filename, "rb")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #e9b2be79b5752ee6 — Filesystem access.
pkgs/python/[email protected]/examples/applications/wikipedia_principal_eigenvector.py:60 
        with open(filename, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1ab763b90907e03 — Environment-variable access.
pkgs/python/[email protected]/sklearn/__init__.py:56 
os.environ.setdefault("KMP_DUPLICATE_LIB_OK", "True")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e7b3da462bd1114 — Environment-variable access.
pkgs/python/[email protected]/sklearn/__init__.py:60 
os.environ.setdefault("KMP_INIT_AT_FORK", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf71c70a757e8276 — Environment-variable access.
pkgs/python/[email protected]/sklearn/__init__.py:145 
    _random_seed = os.environ.get("SKLEARN_SEED", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94a9e3020e4d2dea — Filesystem access.
pkgs/python/[email protected]/sklearn/_build_utils/tempita.py:22 
    with open(fromfile, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a96f1cfb9f457dbb — Filesystem access.
pkgs/python/[email protected]/sklearn/_build_utils/tempita.py:28 
    with open(outfile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f40b5705fbeb48e5 — Filesystem access.
pkgs/python/[email protected]/sklearn/_build_utils/version.py:11 
data = open(sklearn_init).readlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab2cc42382752bed — Environment-variable access.
pkgs/python/[email protected]/sklearn/_config.py:11 
    "assume_finite": bool(os.environ.get("SKLEARN_ASSUME_FINITE", False)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a37016bb1081e403 — Environment-variable access.
pkgs/python/[email protected]/sklearn/_config.py:12 
    "working_memory": int(os.environ.get("SKLEARN_WORKING_MEMORY", 1024)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f09a502740f85f7b — Environment-variable access.
pkgs/python/[email protected]/sklearn/_config.py:16 
        os.environ.get("SKLEARN_PAIRWISE_DIST_CHUNK_SIZE", 256)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b24e52dde7419bc — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:62 
    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96bb4b2f29e71539 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:89 
    environ.get("SKLEARN_RUN_FLOAT32_TESTS", "0") != "1",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f4198cc360f2fce — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:102 
    download_if_missing = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52d56094f215923a — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:139 
    run_network_tests = environ.get("SKLEARN_SKIP_NETWORK_TESTS", "1") == "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ec7c4317fd0bdb6 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:172 
    worker_id = environ.get("PYTEST_XDIST_WORKER", "gw0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e3f80046a7a3145 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:398 
    random_seed_var = environ.get("SKLEARN_TESTS_GLOBAL_RANDOM_SEED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67118a04c16a112a — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:450 
    xdist_worker_count = environ.get("PYTEST_XDIST_WORKER_COUNT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29bcfee1581f53d0 — Environment-variable access.
pkgs/python/[email protected]/sklearn/conftest.py:457 
    if environ.get("SKLEARN_WARNINGS_AS_ERRORS", "0") != "0":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db651771248d3ec5 — Environment-variable access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:83 
        data_home = environ.get("SCIKIT_LEARN_DATA", join("~", "scikit_learn_data"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23a1a4ba5597d536 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:309 
            data.append(Path(filename).read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08c0c6de8c64e3c0 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:489 
    return path.read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #905c91fad76b18b3 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_base.py:1428 
    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a111a59d2e629ef — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_lfw.py:441 
    with open(index_file_path, "rb") as index_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99ac9ad3bae8cbc2 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_svmlight_format_io.py:197 
        return open(f, "rb", closefd=False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #799af463548e6061 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_svmlight_format_io.py:213 
        return open(f, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa2e4dd06b21e431 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_svmlight_format_io.py:590 
        with open(f, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebb5df79fd806e94 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_twenty_newsgroups.py:96 
    with open(cache_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8e6aa35b587e245 — Filesystem access.
pkgs/python/[email protected]/sklearn/datasets/_twenty_newsgroups.py:307 
            with open(cache_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bb37adddb0a3f45 — Filesystem access.
pkgs/python/[email protected]/sklearn/feature_extraction/text.py:232 
            with open(doc, "rb") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f166e8eb6822136b — Filesystem access.
pkgs/python/[email protected]/sklearn/tree/_export.py:929 
            out_file = open(out_file, "w", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7aea022d202ad46c — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_array_api.py:182 
    if os.environ.get("SCIPY_ARRAY_API") != "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73b76e3ee83d765b — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:20 
    estimator_css = estimator_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29f2377ed11927c6 — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:21 
    params_css = params_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa007629a085119e — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:22 
    features_css = features_css_file.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17331d7da8a28a52 — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_repr_html/estimator.py:563 
        with open(str(Path(__file__).parent / "estimator.js"), "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19860cef902ec230 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:367 
    if int(os.environ.get("SKLEARN_SKIP_NETWORK_TESTS", 0)):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bef14e44f2d6179 — Filesystem access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:926 
        with open(source_file, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fac96f56f806b44f — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:930 
        env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46dcad861b72f55c — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:937 
        coverage_rc = os.environ.get("COVERAGE_PROCESS_START")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95acc30e9e6db9a2 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:1334 
    if os.environ.get("SCIPY_ARRAY_API") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #917cb43c98a56897 — Environment-variable access.
pkgs/python/[email protected]/sklearn/utils/_testing.py:1363 
        if os.getenv("PYTORCH_ENABLE_MPS_FALLBACK") != "1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

soundfile

python dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #b82479317d5dcaf8 — Environment-variable access.
pkgs/python/[email protected]/setup.py:8 
platform = os.environ.get('PYSOUNDFILE_PLATFORM', sys.platform)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d506c8332d69c38 — Environment-variable access.
pkgs/python/[email protected]/setup.py:9 
architecture0 = os.environ.get('PYSOUNDFILE_ARCHITECTURE')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d46c8217c1dd884 — Filesystem access.
pkgs/python/[email protected]/setup.py:76 
with open('soundfile.py') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ad6d56d21dc2fbd — Filesystem access.
pkgs/python/[email protected]/setup.py:117 
    long_description=open('README.rst').read(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee1ce48e9e37dfec — Environment-variable access.
pkgs/python/[email protected]/soundfile_build.py:138 
platform = os.environ.get('PYSOUNDFILE_PLATFORM', sys.platform)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tqdm

python dependency
expand_more 17 low-confidence finding(s)
low env_fs dependency Excluded from app score #ef94d49d6302f911 — Filesystem access.
pkgs/python/[email protected]/.meta/mkcompletion.py:59 
    (Path(__file__).resolve().parent.parent / 'tqdm' / 'completion.sh').write_text(
        completion, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9acdf1637823199b — Filesystem access.
pkgs/python/[email protected]/.meta/mkdocs.py:51 
README_rst = (src_dir / '.readme.rst').read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b341884483611063 — Filesystem access.
pkgs/python/[email protected]/.meta/mkdocs.py:93 
man = (src_dir / '.tqdm.1.md').read_text() + man

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0de4c8f0acc124a — Filesystem access.
pkgs/python/[email protected]/.meta/mkdocs.py:104 
    (src_dir.parent / 'README.rst').write_text(README_rst, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87ec855e456c3d6a — Filesystem access.
pkgs/python/[email protected]/.meta/mksnap.py:65 
    (Path(__file__).resolve().parent.parent / 'snapcraft.yaml').write_text(
        snap_yml.decode('utf-8') if hasattr(snap_yml, 'decode') else snap_yml, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #42a6ad442cc771b1 — Filesystem access.
pkgs/python/[email protected]/examples/7zx.py:82 
            with open(md, buffering=1) as m:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #e196f21cf5cf944a — Filesystem access.
pkgs/python/[email protected]/examples/tqdm_requests.py:31 
with open(eg_out, "wb") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #531799a4186a44ac — Filesystem access.
pkgs/python/[email protected]/examples/tqdm_requests.py:44 
    open(eg_out, "wb"), "write",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling reachable #904bc086c19b3af2 — Filesystem access.
pkgs/python/[email protected]/examples/tqdm_wget.py:106 
with tqdm.wrapattr(open(eg_out, "wb"), "write",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af3f700a0686bad3 — Environment-variable access.
pkgs/python/[email protected]/tqdm/autonotebook.py:15 
        if any(i == 'QT_API' or i.startswith('SPYDER') for i in os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19a5b1bc18d0ea57 — Filesystem access.
pkgs/python/[email protected]/tqdm/cli.py:270 
                dst.write_bytes(fi.read_bytes())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b65a3f4adacc29f0 — Environment-variable access.
pkgs/python/[email protected]/tqdm/contrib/bells.py:17 
if getenv("TQDM_SLACK_TOKEN") and getenv("TQDM_SLACK_CHANNEL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #887c7a04a715eceb — Environment-variable access.
pkgs/python/[email protected]/tqdm/contrib/bells.py:19 
elif getenv("TQDM_TELEGRAM_TOKEN") and getenv("TQDM_TELEGRAM_CHAT_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8b8986c1dfb6c71 — Environment-variable access.
pkgs/python/[email protected]/tqdm/contrib/bells.py:21 
elif getenv("TQDM_DISCORD_TOKEN") and getenv("TQDM_DISCORD_CHANNEL_ID"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #a4b929bf204cd99a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/tqdm/contrib/discord.py:45 
            req = self.session.post(
                f'{self.API}/channels/{self.channel_id}/messages',
                headers={'Authorization': f'Bot {self.token}', 'User-Agent': self.UA},
                json={'content': f"`{self.text}`"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9e1487832d1ef981 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/tqdm/contrib/telegram.py:42 
            req = self.session.post(
                f'{self.API}{self.token}/sendMessage',
                data={'text': f"`{self.text}`", 'chat_id': self.chat_id,
                      'parse_mode': 'MarkdownV2'})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #33edea77dacf3f1a — Environment-variable access.
pkgs/python/[email protected]/tqdm/utils.py:50 
            (k[i:].lower(), v) for k, v in os.environ.items() if k.startswith(prefix))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

umap-learn

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #254eaf191c60295a — Filesystem access.
pkgs/python/[email protected]/umap/parametric_umap.py:500 
            with open(model_output, "wb") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f22b493d64f4bdd8 — Filesystem access.
pkgs/python/[email protected]/umap/parametric_umap.py:1002 
    model = pickle.load((open(model_output, "rb")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

unidecode

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #0d9dbda3bd11d43b — Filesystem access.
pkgs/python/[email protected]/setup.py:9 
    with open(os.path.join(os.path.dirname(__file__), "README.rst"), encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b03fd3abf53d5c1 — Filesystem access.
pkgs/python/[email protected]/unidecode/util.py:34 
            stream = open(args.path, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • numpy prod — extract failed: not a gzip file
  • scipy prod — sdist exceeds byte cap
  • torch prod — no sdist (wheels only)
  • torchaudio prod — no sdist (wheels only)
  • pysbd prod — no sdist (wheels only)
  • matplotlib prod — sdist exceeds byte cap
  • spacy prod — no sdist (wheels only)