Close Open Privacy Scan
App Privacy Score
Low risk · 265 finding(s)
Based on: 1 first-party package(s) · 8/8 deps analyzed
Dependency score: 82 (Low risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
::ffff:192.168.0.1about.readthedocs.orgapi.flattr.comapi.github.combrotlipy.readthedocs.iobugs.launchpad.netcdn.jsdelivr.netclick.palletsprojects.comcodespeak.netcommonmark.orgdatatracker.ietf.orgdeveloper.mozilla.orgdocs.pydantic.devdocs.python.orgdownload.gnome.orgduckduckgo.comen.wikipedia.orgfastapi.tiangolo.comflattr.comfonts.googleapis.comftp.gnu.orggist.github.comgithub.comgitlab.gnome.orggrokipedia.comhtml.duckduckgo.comhtml.spec.whatwg.orghttpbin.orglaunchpad.netlocalhost.tiangolo.comlxml.demodelcontextprotocol.iomy.nsmüller.denews.search.yahoo.comother.compeps.python.orgpurl.oclc.orgpypi.orgrelaxng.orgsearch.brave.comsearch.yahoo.comsethmlarson.devspdx.devstackoverflow.comstarlette.devswagger.iotools.ietf.orgtyper.tiangolo.comunpkg.comwww.apache.orgwww.bing.comwww.google.comwww.mojeek.comwww.python.orgwww.rfc-editor.orgwww.startpage.comwww.w3.orgwww.xmlsoft.orgwww.youtube.comxn--fiqs8s.icom.museumyandex.comzlib.net
</> First-Party Code
first-party (python)
python first-partyexpand_more 17 low-confidence finding(s)
low env_fs — Environment-variable access. 11 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 4 locations
low env_fs — Filesystem access. 2 locations
</> Dependencies
click
python dependencyexpand_more 31 low-confidence finding(s)
low env_fs — Filesystem access. 8 locations
low env_fs — Environment-variable access. 23 locations
fake-useragent
python dependencyexpand_more 1 low-confidence finding(s)
for line in json_path.read_text().splitlines():Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
fastapi
python dependencyexpand_more 70 low-confidence finding(s)
low env_fs — Filesystem access. 55 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 12 locations
os.environ["DYLD_FALLBACK_LIBRARY_PATH"] = "/opt/homebrew/lib"Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
httpx
python dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Environment-variable access. 4 locations
lxml
python dependencyexpand_more 54 low-confidence finding(s)
low env_fs — Filesystem access. 34 locations
low env_fs — Environment-variable access. 15 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
mcp
python dependencyexpand_more 39 low-confidence finding(s)
low env_fs — Environment-variable access. 16 locations
pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:343
pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:344
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 6 locations
low env_fs — Filesystem access. 15 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
primp
python dependencyexpand_more 44 low-confidence finding(s)
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 43 locations
tasks = [client.get(url) for url in urls]Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.