Close Open Privacy Scan

link https://github.com/nadeem-shaikh/redact-ai
bolt Snapshot: commit c99eca7
science engine v1.4
schedule 2026-07-14T00:23:04.426699+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

App Privacy Score

97 /100
Low privacy risk

Low risk · 230 finding(s)

Dependency score: 89 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 230 low
First-party packages: 1
Dependency packages: 11
Ecosystem: python

swap_horiz External domains

aomedia.googlesource.comarxiv.orgbitbucket.orgbugs.python.orgcdn.jsdelivr.netcommonmark.orgdatatracker.ietf.orgdeveloper.mozilla.orgdiscuss.python.orgdocs.pydantic.devdocs.python.orgdocs.rsen.wikipedia.orgerrors.pydantic.devexam_ple.comexplosion.aifastapi.tiangolo.comfonts.googleapis.comfoo.comforkortelse.dkgithub.comhypothesis.readthedocs.iojson-schema.orglists.sourceforge.netlocalhost.tiangolo.commypy.readthedocs.ionats.ions.adobe.compaddleocr.bj.bcebos.compeps.python.orgpillow-heif.readthedocs.iopillow.readthedocs.iopostvai.compydantic-docs.helpmanual.iopypi.orgpypi.python.orgpython-devtools.helpmanual.iopyyaml.orgraw.githubusercontent.comrich.readthedocs.ioslovored.comspacy.iospdx.devstackoverflow.comswagger.iotyper.tiangolo.comunpkg.comwww.apache.orgwww.example.珠宝www.nasm.uswww.ncbi.nlm.nih.govwww.nltk.orgwww.python.orgwww.starlette.iowww.w3.orgwww.xudongz.comwww.youtube.comwww.аррӏе.com

</> First-Party Code

first-party (python)

python first-party
expand_more 8 low-confidence finding(s)
low env_fs production #447924364c6d8324 — Filesystem access.
repo/src/redact_ai/pipeline/detect/contact.py:114 
    text = files("redact_ai.resources").joinpath("countries_en.txt").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a0d58e896260425 — Filesystem access.
repo/src/redact_ai/pipeline/detect/identity.py:25 
    text = files("redact_ai.resources").joinpath(filename).read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #daad89e81e9d233b — Filesystem access.
repo/src/redact_ai/pipeline/redact.py:182 
        font_bytes = files("redact_ai.resources").joinpath("DejaVuSans-Bold.ttf").read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17975f3b819a5d56 — Filesystem access.
repo/src/redact_ai/policy/loader.py:31 
        return (
            files("redact_ai.resources").joinpath("default_policy.yaml").read_text(encoding="utf-8")
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f3093fd2e1fa6ae — Filesystem access.
repo/src/redact_ai/policy/loader.py:36 
        return (repo_root / "examples" / "default_policy.yaml").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #819ea9edf16c638c — Filesystem access.
repo/src/redact_ai/policy/loader.py:55 
            text = path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96a7b095e0f9859f — Filesystem access.
repo/src/redact_ai/server/routes.py:76 
    html = files("redact_ai.server.static").joinpath("index.html").read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adfd21c1eea8d549 — Filesystem access.
repo/src/redact_ai/server/routes.py:94 
        data = files("redact_ai.server.static").joinpath(safe).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

fastapi

python dependency
expand_more 28 low-confidence finding(s)
low env_fs dependency Excluded from app score #bc6db863d61fe537 — Filesystem access.
pkgs/python/[email protected]/docs_src/background_tasks/tutorial001.py:7 
    with open("log.txt", mode="w") as email_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d4655709a76937f — Filesystem access.
pkgs/python/[email protected]/docs_src/background_tasks/tutorial002.py:9 
    with open("log.txt", mode="a") as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9b522b4aacd7eca — Filesystem access.
pkgs/python/[email protected]/docs_src/background_tasks/tutorial002_an.py:10 
    with open("log.txt", mode="a") as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf7a48375d6183d8 — Filesystem access.
pkgs/python/[email protected]/docs_src/background_tasks/tutorial002_an_py310.py:9 
    with open("log.txt", mode="a") as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a36c90d533e2546e — Filesystem access.
pkgs/python/[email protected]/docs_src/background_tasks/tutorial002_an_py39.py:9 
    with open("log.txt", mode="a") as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd4a698e3ec7ea05 — Filesystem access.
pkgs/python/[email protected]/docs_src/background_tasks/tutorial002_py310.py:7 
    with open("log.txt", mode="a") as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89fd52817f13cf80 — Filesystem access.
pkgs/python/[email protected]/docs_src/custom_response/tutorial008.py:11 
        with open(some_file_path, mode="rb") as file_like:  # (2)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4abd953d25b00f39 — Filesystem access.
pkgs/python/[email protected]/docs_src/events/tutorial002.py:8 
    with open("log.txt", mode="a") as log:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2fae95fcf911949 — Filesystem access.
pkgs/python/[email protected]/docs_src/generate_clients/tutorial004.py:5 
openapi_content = json.loads(file_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #931d8a81f1460711 — Filesystem access.
pkgs/python/[email protected]/docs_src/generate_clients/tutorial004.py:15 
file_path.write_text(json.dumps(openapi_content))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a2ab4a769f02eb4 — Environment-variable access.
pkgs/python/[email protected]/pdm_build.py:6 
TIANGOLO_BUILD_PACKAGE = os.getenv("TIANGOLO_BUILD_PACKAGE", "fastapi")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #03c25a37850da9c6 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:55 
    return mkdocs.utils.yaml_load(en_config_path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #ea2c02c7efb26a90 — Environment-variable access.
pkgs/python/[email protected]/scripts/docs.py:79 
        os.environ["INSIDERS_FILE"] = "../en/mkdocs.insiders.yml"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #09d0424ef50231df — Environment-variable access.
pkgs/python/[email protected]/scripts/docs.py:81 
    os.environ["DYLD_FALLBACK_LIBRARY_PATH"] = "/opt/homebrew/lib"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #91f83725f9e21875 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:95 
    new_config_path.write_text("INHERIT: ../en/mkdocs.yml\n", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #66cb2fbd8b96c27f — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:100 
    en_index_content = en_index_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #4a25e5148da4c843 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:102 
    new_index_path.write_text(new_index_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #d61cdcbc43a1d51d — Environment-variable access.
pkgs/python/[email protected]/scripts/docs.py:116 
    insiders_env_file = os.environ.get("INSIDERS_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #9d062a96944c7de5 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:159 
    content = en_index.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #ca0cf3cda5a3aae9 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:164 
    sponsors = mkdocs.utils.yaml_load(sponsors_data_path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #f12214e64dfc5226 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:195 
    readme_path.write_text(new_content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #686553809b9b9cda — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:206 
    readme_content = readme_path.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #d9a7fa69b748238a — Environment-variable access.
pkgs/python/[email protected]/scripts/docs.py:286 
        args, env={**os.environ, "LINENUMS": "true"}, cwd=lang_path, check=True

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #ce5f4a938d62a807 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:298 
        language_names_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #665659bed67b0e0d — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:323 
    en_config_path.write_text(
        yaml.dump(config, sort_keys=False, width=200, allow_unicode=True),
        encoding="utf-8",
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #df469efa8cc6e1c0 — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:390 
    base_content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #6ab9a09401fcc10e — Filesystem access.
pkgs/python/[email protected]/scripts/docs.py:420 
        version_file.write_text(content_format, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #4f4cf7b3d1c9da57 — Filesystem access.
pkgs/python/[email protected]/scripts/mkdocs_hooks.py:26 
    return missing_translation_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

paddleocr

python dependency
expand_more 124 low-confidence finding(s)
low env_fs dependency Excluded from app score #575a13fecfab5be9 — Filesystem access.
pkgs/python/[email protected]/paddleocr.py:592 
            with open(image_file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #553be788c433e47d — Filesystem access.
pkgs/python/[email protected]/paddleocr.py:985 
                    with open(outfile, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5730e9b1c7f9c4c1 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/imaug/label_ops.py:124 
            with open(character_dict_path, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5549eb90e5019989 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/imaug/label_ops.py:274 
        with open(character_dict_path, "r", encoding="utf-8") as fr:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2868aab861da6ed — Filesystem access.
pkgs/python/[email protected]/ppocr/data/imaug/label_ops.py:280 
        with open(class_path, "r") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5e3870b392282aa — Filesystem access.
pkgs/python/[email protected]/ppocr/data/imaug/label_ops.py:651 
        with open(character_dict_path, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbcf0809cdcd63f2 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/imaug/label_ops.py:1453 
        with open(character_dict_path, "r") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8844cc39a9bc21b6 — Environment-variable access.
pkgs/python/[email protected]/ppocr/data/imaug/latex_ocr_aug.py:27 
os.environ["NO_ALBUMENTATIONS_UPDATE"] = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2dbcee8d45e899c — Filesystem access.
pkgs/python/[email protected]/ppocr/data/imaug/pg_process.py:59 
        with open(character_dict_path, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #275809faaf992782 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/latexocr_dataset.py:54 
        file = open(pkl_path, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42316876aedcbdc5 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/latexocr_dataset.py:137 
                with open(data["img_path"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01bf722aaf40e58f — Filesystem access.
pkgs/python/[email protected]/ppocr/data/pgnet_dataset.py:65 
            with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ae0eca56ff61a21 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/pgnet_dataset.py:91 
            with open(data["img_path"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b29c8825178df2b6 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/pubtab_dataset.py:62 
            with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7acc358072552560 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/pubtab_dataset.py:114 
            with open(data["img_path"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1989d6b700b3e39 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/simple_dataset.py:62 
            with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3cc71a1ff0267e7 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/simple_dataset.py:106 
            with open(data["img_path"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16c5a95e6f37ea0b — Filesystem access.
pkgs/python/[email protected]/ppocr/data/simple_dataset.py:132 
            with open(data["img_path"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0033964c14e00c67 — Filesystem access.
pkgs/python/[email protected]/ppocr/data/simple_dataset.py:233 
            with open(data["img_path"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a773869fde3a1338 — Filesystem access.
pkgs/python/[email protected]/ppocr/postprocess/picodet_postprocess.py:125 
        with open(layout_dict_path, "r", encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b8c7b70ab19ac77 — Filesystem access.
pkgs/python/[email protected]/ppocr/postprocess/rec_postprocess.py:34 
            with open(character_dict_path, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13455ad556a0bbd9 — Filesystem access.
pkgs/python/[email protected]/ppocr/postprocess/table_postprocess.py:26 
        with open(character_dict_path, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05b310d62544fb2d — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/e2e_utils/extract_textpoint_fast.py:29 
    with open(character_dict_path, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c53a771639f3d386 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/e2e_utils/extract_textpoint_slow.py:29 
    with open(character_dict_path, "rb") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d96a8c1ac038aef4 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/export_model.py:43 
        hpi_config = yaml.safe_load(open(config["Global"]["hpi_config_path"], "r"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab6b7629cc440ef8 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/export_model.py:87 
            with open(tokenizer_file, encoding="utf-8") as tokenizer_config_handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9735ba3242dcd427 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/export_model.py:92 
            with open(config["Global"]["character_dict_path"], encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91cf7cb76a2e74d5 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/export_model.py:99 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e01bee9a9f0dd16 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/formula_utils/math_txt2pkl.py:38 
        eqs = open(equations, "r").read().split("\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5675bbff710c67dd — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/formula_utils/math_txt2pkl.py:50 
        with open(save_p, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed1f274d9109650e — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/gen_label.py:20 
    with open(out_label, "w") as out_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e940e11a6283d0f8 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/gen_label.py:21 
        with open(input_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a18d62f102c020b1 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/gen_label.py:30 
    with open(out_label, "w") as out_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #266bcdc0224c3008 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/gen_label.py:34 
            with open(
                os.path.join(input_dir, label_file), "r", encoding="utf-8-sig"
            ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29d03b1c416f0fc0 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/network.py:89 
        with open(tmp_file, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c972b25bc53e739 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/network.py:124 
                with open(os.path.join(model_storage_directory, filename), "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2177a38fcc41331e — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/save_load.py:71 
                with open(os.path.join(checkpoints, "metric.states"), "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46c92b712d14f59a — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/save_load.py:142 
            with open(checkpoints + ".states", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c817aee92469c5e — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/save_load.py:254 
        with open(os.path.join(model_path, f"{prefix}.info.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5effa4842173654 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/save_load.py:262 
    with open(metric_prefix + ".states", "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03d5ce0d3e7c45d3 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/save_load.py:281 
        with open(train_results_path, "r") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e85a8bcd38bd07cd — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/save_load.py:347 
    with open(train_results_path, "w") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab05fc5c63d49dd8 — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/utility.py:72 
        with open(infer_list, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f240fa9c9b49f6b — Filesystem access.
pkgs/python/[email protected]/ppocr/utils/utility.py:156 
    with open(label_map_path, "r", encoding="utf-8") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d0b0b5777ee6a25 — Environment-variable access.
pkgs/python/[email protected]/ppstructure/kie/predict_kie_token_ser.py:21 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbcfcb6d1803aaa9 — Filesystem access.
pkgs/python/[email protected]/ppstructure/kie/predict_kie_token_ser.py:142 
    with open(
        os.path.join(args.output, "infer.txt"), mode="w", encoding="utf-8"
    ) as f_w:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddb0cc8262396a21 — Environment-variable access.
pkgs/python/[email protected]/ppstructure/kie/predict_kie_token_ser_re.py:21 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07c54f39679f22dc — Filesystem access.
pkgs/python/[email protected]/ppstructure/kie/predict_kie_token_ser_re.py:94 
    with open(
        os.path.join(args.output, "infer.txt"), mode="w", encoding="utf-8"
    ) as f_w:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #01c25adcfbc0c40a — Filesystem access.
pkgs/python/[email protected]/ppstructure/kie/tools/eval_with_label_end2end.py:40 
    with open(fp, "r", encoding="utf-8") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #2deeab3e47dbf2c1 — Filesystem access.
pkgs/python/[email protected]/ppstructure/kie/tools/trans_funsd_label.py:49 
        with open(os.path.join(anno_dir, anno_fn + ".json"), "r") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #d4b1f1606671a837 — Filesystem access.
pkgs/python/[email protected]/ppstructure/kie/tools/trans_funsd_label.py:137 
    with open(test_output_dir, "w") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #8fbebd9a211984a9 — Filesystem access.
pkgs/python/[email protected]/ppstructure/kie/tools/trans_funsd_label.py:152 
    with open(train_output_dir, "w") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #1ea7dbf3130cf824 — Filesystem access.
pkgs/python/[email protected]/ppstructure/kie/tools/trans_xfun_data.py:19 
    with open(json_path, "r", encoding="utf-8") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #ecaca931a5ec61eb — Filesystem access.
pkgs/python/[email protected]/ppstructure/kie/tools/trans_xfun_data.py:24 
    with open(output_file, "w", encoding="utf-8") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a323f5cad13b62d2 — Environment-variable access.
pkgs/python/[email protected]/ppstructure/layout/predict_layout.py:21 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65adb77bb128816b — Filesystem access.
pkgs/python/[email protected]/ppstructure/pdf2word/pdf2word.py:374 
                        with open(os.path.join(storage_dir, filename), "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dec91f09bf351fbf — Environment-variable access.
pkgs/python/[email protected]/ppstructure/predict_system.py:23 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e89f2ecc87a823f — Filesystem access.
pkgs/python/[email protected]/ppstructure/predict_system.py:279 
    with open(
        os.path.join(excel_save_folder, "res_{}.txt".format(img_idx)),
        "w",
        encoding="utf8",
    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e631cd98600717af — Filesystem access.
pkgs/python/[email protected]/ppstructure/predict_system.py:359 
                with open(
                    os.path.join(save_folder, img_name, "res_{}_kie.txt".format(index)),
                    "w",
                    encoding="utf8",
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31e221f1ee577aba — Filesystem access.
pkgs/python/[email protected]/ppstructure/recovery/recovery_to_markdown.py:180 
    with open(md_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ee6d7f70fa54425 — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/convert_label2html.py:24 
    with open(tmp_file_path, "a+", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86a27bd0f105fb69 — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/convert_label2html.py:67 
    with open(gt_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #455177fe59b058de — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/eval_table.py:44 
    with open(txt_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed197986988abd3e — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/eval_table.py:56 
        data = pickle.load(open(path, "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b168c80743313c95 — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/eval_table.py:63 
    with open(path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f04c38ea35e1cf4 — Environment-variable access.
pkgs/python/[email protected]/ppstructure/table/predict_structure.py:21 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0088832494087b57 — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/predict_structure.py:175 
    with open(
        os.path.join(args.output, "infer.txt"), mode="w", encoding="utf-8"
    ) as f_w:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #392102e69e89d89a — Environment-variable access.
pkgs/python/[email protected]/ppstructure/table/predict_table.py:23 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #874fb1f51ee4236d — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/predict_table.py:164 
    f_html = open(os.path.join(args.output, "show.html"), mode="w", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d6039dd46fc6be2 — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/table_master_match.py:90 
        data = pickle.load(open(path, "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37ff27b890ed62eb — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/table_master_match.py:96 
            this_data = pickle.load(open(pkl, "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e42ab3c5d2104d85 — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/table_metric/table_metric.py:242 
    with open("sample_pred.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00cb58e3ef3862d8 — Filesystem access.
pkgs/python/[email protected]/ppstructure/table/table_metric/table_metric.py:244 
    with open("sample_gt.json") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #dc4f5f3070f12d6a — Filesystem access.
pkgs/python/[email protected]/tools/end2end/convert_ppocr_label.py:33 
    label_file = open(label_dir, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #8ab22b5597ad141a — Filesystem access.
pkgs/python/[email protected]/tools/end2end/convert_ppocr_label.py:84 
        with open(save_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #9e92dd1cbd5f6494 — Filesystem access.
pkgs/python/[email protected]/tools/end2end/draw_html.py:40 
    with open(html_path, "w") as html:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #f5a0aaed28d5df89 — Filesystem access.
pkgs/python/[email protected]/tools/end2end/eval_end2end.py:81 
        with open(os.path.join(gt_dir, val_name), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #2d406f9998c78dfa — Filesystem access.
pkgs/python/[email protected]/tools/end2end/eval_end2end.py:102 
            with open(val_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #f62cdac7b55c834d — Filesystem access.
pkgs/python/[email protected]/tools/export_center.py:70 
    with open("train_center.pkl", "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #46d187b90d83b00b — Environment-variable access.
pkgs/python/[email protected]/tools/infer/predict_cls.py:21 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #2a0f3e472211bdfb — Environment-variable access.
pkgs/python/[email protected]/tools/infer/predict_det.py:21 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #90bb43d09e8bb21b — Filesystem access.
pkgs/python/[email protected]/tools/infer/predict_det.py:486 
    with open(os.path.join(draw_img_save_dir, "det_results.txt"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #029c282a5d149743 — Environment-variable access.
pkgs/python/[email protected]/tools/infer/predict_e2e.py:21 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #16da4c3d55fc725c — Environment-variable access.
pkgs/python/[email protected]/tools/infer/predict_rec.py:22 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #7f91378fa47aef4f — Environment-variable access.
pkgs/python/[email protected]/tools/infer/predict_sr.py:22 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #7608fb95b1ffa790 — Environment-variable access.
pkgs/python/[email protected]/tools/infer/predict_system.py:22 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #61cc863c391c4cc5 — Filesystem access.
pkgs/python/[email protected]/tools/infer/predict_system.py:304 
    with open(
        os.path.join(draw_img_save_dir, "system_results.txt"), "w", encoding="utf-8"
    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #40f227daf3b9372f — Environment-variable access.
pkgs/python/[email protected]/tools/infer/utility.py:344 
        gpu_id_str = os.environ.get("CUDA_VISIBLE_DEVICES", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #75d84e36e195c410 — Environment-variable access.
pkgs/python/[email protected]/tools/infer/utility.py:346 
        gpu_id_str = os.environ.get("HIP_VISIBLE_DEVICES", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #018625080199427c — Environment-variable access.
pkgs/python/[email protected]/tools/infer_cls.py:28 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #3035d5317133e492 — Filesystem access.
pkgs/python/[email protected]/tools/infer_cls.py:68 
        with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #a3d92c23d33787f5 — Environment-variable access.
pkgs/python/[email protected]/tools/infer_det.py:28 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #8abc21836bd7de2f — Filesystem access.
pkgs/python/[email protected]/tools/infer_det.py:84 
    with open(save_res_path, "wb") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #a217f4438733a309 — Filesystem access.
pkgs/python/[email protected]/tools/infer_det.py:87 
            with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #cf793901c9a30ef7 — Environment-variable access.
pkgs/python/[email protected]/tools/infer_e2e.py:28 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #26ef4f1c9d4274f6 — Filesystem access.
pkgs/python/[email protected]/tools/infer_e2e.py:130 
    with open(save_res_path, "wb") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #58a4f4117c1c0907 — Filesystem access.
pkgs/python/[email protected]/tools/infer_e2e.py:133 
            with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c5b26bf4eadf41ae — Environment-variable access.
pkgs/python/[email protected]/tools/infer_kie.py:29 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #cf413d70e0e57c0f — Filesystem access.
pkgs/python/[email protected]/tools/infer_kie.py:43 
    with open(filepath, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c2b522ce97849a5e — Filesystem access.
pkgs/python/[email protected]/tools/infer_kie.py:151 
    with open(save_res_path, "w") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #471150aaf3c3851a — Filesystem access.
pkgs/python/[email protected]/tools/infer_kie.py:152 
        with open(config["Global"]["infer_img"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #56c8159e547a223a — Filesystem access.
pkgs/python/[email protected]/tools/infer_kie.py:161 
                with open(data["img_path"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #0776d329ca705db6 — Environment-variable access.
pkgs/python/[email protected]/tools/infer_kie_token_ser.py:28 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c8f212a6e1da208f — Filesystem access.
pkgs/python/[email protected]/tools/infer_kie_token_ser.py:112 
        with open(data["img_path"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #12e177f5b69682fb — Filesystem access.
pkgs/python/[email protected]/tools/infer_kie_token_ser.py:133 
        with open(config["Global"]["infer_img"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #538f28c8a75b51ff — Filesystem access.
pkgs/python/[email protected]/tools/infer_kie_token_ser.py:138 
    with open(
        os.path.join(config["Global"]["save_res_path"], "infer_results.txt"),
        "w",
        encoding="utf-8",
    ) as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #927a704c3e42e46a — Environment-variable access.
pkgs/python/[email protected]/tools/infer_kie_token_ser_re.py:28 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #4f9c1be663c4df02 — Filesystem access.
pkgs/python/[email protected]/tools/infer_kie_token_ser_re.py:191 
        with open(config["Global"]["infer_img"], "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #38822c328d993304 — Filesystem access.
pkgs/python/[email protected]/tools/infer_kie_token_ser_re.py:196 
    with open(
        os.path.join(config["Global"]["save_res_path"], "infer_results.txt"),
        "w",
        encoding="utf-8",
    ) as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #08ee2f1ef5d46ed9 — Environment-variable access.
pkgs/python/[email protected]/tools/infer_rec.py:29 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #f63d970bb1da0968 — Filesystem access.
pkgs/python/[email protected]/tools/infer_rec.py:132 
    with open(save_res_path, "w") as fout:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #83e3665298b55084 — Filesystem access.
pkgs/python/[email protected]/tools/infer_rec.py:135 
            with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #5d42e3c26b18b8d8 — Environment-variable access.
pkgs/python/[email protected]/tools/infer_sr.py:31 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #78d91bdf376d355b — Environment-variable access.
pkgs/python/[email protected]/tools/infer_table.py:29 
os.environ["FLAGS_allocator_strategy"] = "auto_growth"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #578b6aa84482f0ff — Filesystem access.
pkgs/python/[email protected]/tools/infer_table.py:80 
    with open(
        os.path.join(save_res_path, "infer.txt"), mode="w", encoding="utf-8"
    ) as f_w:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #5bee31c00d60d48a — Filesystem access.
pkgs/python/[email protected]/tools/infer_table.py:85 
            with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #6d7078a3ac9c3148 — Filesystem access.
pkgs/python/[email protected]/tools/program.py:84 
    config = yaml.load(open(file_path, "rb"), Loader=yaml.Loader)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #355df85a0b3a1982 — Filesystem access.
pkgs/python/[email protected]/tools/program.py:788 
        with open(os.path.join(save_model_dir, "config.yml"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #d0565bb0dd077e0f — Environment-variable access.
pkgs/python/[email protected]/tools/program.py:851 
        device = "xpu:{0}".format(os.getenv("FLAGS_selected_xpus", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #8c26a5ec0d8cf20a — Environment-variable access.
pkgs/python/[email protected]/tools/program.py:853 
        device = "npu:{0}".format(os.getenv("FLAGS_selected_npus", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #122e22d292251a5b — Environment-variable access.
pkgs/python/[email protected]/tools/program.py:855 
        device = "mlu:{0}".format(os.getenv("FLAGS_selected_mlus", 0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #fa9b7aa50e8c09e1 — Filesystem access.
pkgs/python/[email protected]/tools/test_hubserving.py:80 
    with open(os.path.join(excel_save_folder, "res.txt"), "w", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #d83297fc63610611 — Filesystem access.
pkgs/python/[email protected]/tools/test_hubserving.py:107 
        img = open(image_file, "rb").read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow tooling Excluded from app score unreachable #4132c4e0c4ce4d21 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.
pkgs/python/[email protected]/tools/test_hubserving.py:115 · flow /tmp/closeopen-7z6rq4a0/pkgs/python/[email protected]/tools/test_hubserving.py:107 → /tmp/closeopen-7z6rq4a0/pkgs/python/[email protected]/tools/test_hubserving.py:115 
        r = requests.post(url=args.server_url, headers=headers, data=json.dumps(data))

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

pillow-avif-plugin

python dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #716ace7185bf4f84 — Filesystem access.
pkgs/python/[email protected]/setup.py:11 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8771c8a5aba5093 — Filesystem access.
pkgs/python/[email protected]/setup.py:22 
        with open("README.md") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pillow-heif

python dependency
expand_more 20 low-confidence finding(s)
low env_fs dependency Excluded from app score #c7f6b06dd0024bae — Environment-variable access.
pkgs/python/[email protected]/libheif/linux_build_libs.py:10 
BUILD_DIR = environ.get("BUILD_DIR", "/tmp/ph_build_stuff")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81b71d5e2949b236 — Environment-variable access.
pkgs/python/[email protected]/libheif/linux_build_libs.py:11 
INSTALL_DIR_LIBS = environ.get("INSTALL_DIR_LIBS", "/usr")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db1dc5224d8ce4b9 — Environment-variable access.
pkgs/python/[email protected]/libheif/linux_build_libs.py:12 
PH_LIGHT_VERSION = sys.maxsize <= 2**32 or getenv("PH_LIGHT_ACTION", "0") != "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #019d24b4b801736d — Filesystem access.
pkgs/python/[email protected]/setup.py:28 
    match = re.search(r'__version__\s*=\s*"(.*?)"', Path("pillow_heif/_version.py").read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7e2b94cea590431 — Environment-variable access.
pkgs/python/[email protected]/setup.py:34 
    if "PATH" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d083bd1d7b5af8a — Environment-variable access.
pkgs/python/[email protected]/setup.py:36 
    return any(os.access(os.path.join(path, cmd), os.X_OK) for path in os.environ["PATH"].split(os.pathsep))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ba8c5f7f9fa432d — Environment-variable access.
pkgs/python/[email protected]/setup.py:40 
    command = os.environ.get("PKG_CONFIG", "pkg-config")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5fccd99377c3e7b — Environment-variable access.
pkgs/python/[email protected]/setup.py:73 
        if os.getenv("PRE_COMMIT"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ff9939da3d57e8c — Environment-variable access.
pkgs/python/[email protected]/setup.py:80 
        if _cmd_exists(os.environ.get("PKG_CONFIG", "pkg-config")):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20e29d3f7c1a99b1 — Environment-variable access.
pkgs/python/[email protected]/setup.py:88 
            if root is None and root_name in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #780fd42560394cb6 — Environment-variable access.
pkgs/python/[email protected]/setup.py:89 
                prefix = os.environ[root_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eccff3c56334ff36 — Environment-variable access.
pkgs/python/[email protected]/setup.py:121 
            if k in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9b3d53b73afb749 — Environment-variable access.
pkgs/python/[email protected]/setup.py:122 
                for match in finditer(r"-I([^\s]+)", os.environ[k]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81beef25d3df06b1 — Environment-variable access.
pkgs/python/[email protected]/setup.py:124 
                for match in finditer(r"-L([^\s]+)", os.environ[k]):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #057f46f8f6974a92 — Environment-variable access.
pkgs/python/[email protected]/setup.py:129 
            if k in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e558284623739480 — Environment-variable access.
pkgs/python/[email protected]/setup.py:130 
                for d in os.environ[k].split(os.path.pathsep):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75d831df22a383ee — Environment-variable access.
pkgs/python/[email protected]/setup.py:134 
            if k in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb7b3d618ff3011c — Environment-variable access.
pkgs/python/[email protected]/setup.py:135 
                for d in os.environ[k].split(os.path.pathsep):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12ee34ee18f4039c — Environment-variable access.
pkgs/python/[email protected]/setup.py:143 
            include_path_prefix = os.getenv("MSYS2_PREFIX")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac28e872401c98b1 — Environment-variable access.
pkgs/python/[email protected]/setup.py:269 
    if os.getenv("READTHEDOCS", "False") == "True":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pydantic

python dependency
expand_more 10 low-confidence finding(s)
low env_fs dependency Excluded from app score #76462f1cf5a775eb — Environment-variable access.
pkgs/python/[email protected]/pydantic/_internal/_core_utils.py:582 
    if 'PYDANTIC_SKIP_VALIDATING_CORE_SCHEMAS' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f57aec05020f824d — Filesystem access.
pkgs/python/[email protected]/pydantic/deprecated/parse.py:71 
    b = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9a086e36ffd7a10 — Environment-variable access.
pkgs/python/[email protected]/pydantic/json_schema.py:319 
                if os.environ['PYDANTIC_PRIVATE_ALLOW_UNHANDLED_SCHEMA_TYPES'] == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a81789e9e3390d39 — Filesystem access.
pkgs/python/[email protected]/pydantic/mypy.py:1319 
    with open(config_file, 'rb') as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1ee21e701239ed0 — Environment-variable access.
pkgs/python/[email protected]/pydantic/plugin/_loader.py:26 
    disabled_plugins = os.getenv('PYDANTIC_DISABLE_PLUGINS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #052a07df1b578b38 — Environment-variable access.
pkgs/python/[email protected]/pydantic/v1/env_settings.py:173 
            env_vars: Mapping[str, Optional[str]] = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f42ec91e1563e36f — Environment-variable access.
pkgs/python/[email protected]/pydantic/v1/env_settings.py:175 
            env_vars = {k.lower(): v for k, v in os.environ.items()}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf0957347e948cd3 — Filesystem access.
pkgs/python/[email protected]/pydantic/v1/env_settings.py:307 
                    secret_value = path.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9235a09420ecbe2d — Filesystem access.
pkgs/python/[email protected]/pydantic/v1/mypy.py:948 
    with open(config_file, read_mode) as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #919135d3f6f9a70c — Filesystem access.
pkgs/python/[email protected]/pydantic/v1/parse.py:57 
    b = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pydantic-settings

python dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #602ea217236968e1 — Filesystem access.
pkgs/python/[email protected]/pydantic_settings/sources.py:695 
                    return path.read_text().strip(), preferred_key, value_is_complex

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92f60677495c1008 — Environment-variable access.
pkgs/python/[email protected]/pydantic_settings/sources.py:734 
        return parse_env_vars(os.environ, self.case_sensitive, self.env_ignore_empty, self.env_parse_none_str)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da1c4558b7893fbd — Filesystem access.
pkgs/python/[email protected]/pydantic_settings/sources.py:2016 
        with open(file_path, encoding=self.json_file_encoding) as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f2bc5945dc2df81 — Filesystem access.
pkgs/python/[email protected]/pydantic_settings/sources.py:2039 
        with open(file_path, mode='rb') as toml_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b4177e0fc080847 — Filesystem access.
pkgs/python/[email protected]/pydantic_settings/sources.py:2116 
        with open(file_path, encoding=self.yaml_file_encoding) as yaml_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pytesseract

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #70d644884475bc71 — Environment-variable access.
pkgs/python/[email protected]/pytesseract/pytesseract.py:230 
        'env': environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d44040430ca81b1 — Filesystem access.
pkgs/python/[email protected]/pytesseract/pytesseract.py:288 
    with open(filename, 'rb') as output_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71e742e5d6edfdcb — Environment-variable access.
pkgs/python/[email protected]/pytesseract/pytesseract.py:454 
            env=environ,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

python-multipart

python dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #aa50f57ceeddd4f2 — Filesystem access.
pkgs/python/[email protected]/python_multipart/multipart.py:478 
                tmp_file = open(path, "w+b")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pyyaml

python dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #914772ea45e26a61 — Environment-variable access.
pkgs/python/[email protected]/setup.py:71 
os.environ['SETUPTOOLS_USE_DISTUTILS'] = 'local'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fcd49aa1439cb9e — Environment-variable access.
pkgs/python/[email protected]/setup.py:80 
if 'sdist' in sys.argv or os.environ.get('PYYAML_FORCE_CYTHON') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebc1323431fb9502 — Environment-variable access.
pkgs/python/[email protected]/setup.py:159 
            with_ext = getattr(self, ext.attr_name) or os.environ.get('PYYAML_FORCE_{0}'.format(ext.feature_name.upper()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

spacy

python dependency
expand_more 21 low-confidence finding(s)
low env_fs dependency Excluded from app score #1c3a16f6bc3e6342 — Environment-variable access.
pkgs/python/[email protected]/setup.py:107 
        if self.parallel is None and os.environ.get("SPACY_NUM_BUILD_JOBS") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8a6421204bfc2b5 — Environment-variable access.
pkgs/python/[email protected]/setup.py:108 
            self.parallel = int(os.environ.get("SPACY_NUM_BUILD_JOBS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5157f59c16a3e12d — Environment-variable access.
pkgs/python/[email protected]/setup.py:121 
            v = os.environ.get(k)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0046d17fa400f0f — Filesystem access.
pkgs/python/[email protected]/setup.py:141 
            a = open(filename, "r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #631dafd5595873d6 — Filesystem access.
pkgs/python/[email protected]/setup.py:153 
    a = open(filename, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfad3c165529806e — Environment-variable access.
pkgs/python/[email protected]/spacy/cli/_util.py:101 
    env_string = os.environ.get(env_var, "") if env_var else ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #085a0bcdbd6032f8 — Filesystem access.
pkgs/python/[email protected]/spacy/cli/apply.py:63 
        with open(path, "r") as fin:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6005fd96f8631110 — Filesystem access.
pkgs/python/[email protected]/spacy/cli/info.py:141 
        text = dist.read_text("direct_url.json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #faaf4c6837b57d9b — Environment-variable access.
pkgs/python/[email protected]/spacy/cli/package.py:202 
                env=os.environ.copy(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08d37f8f06f30085 — Environment-variable access.
pkgs/python/[email protected]/spacy/cli/package.py:218 
                env=os.environ.copy(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5b313752479ac81 — Filesystem access.
pkgs/python/[email protected]/spacy/lang/el/get_pos_from_wiktionary.py:51 
        with open("_{0}.py".format(proper_names_dict[i]), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c2d46c239abcecc — Filesystem access.
pkgs/python/[email protected]/spacy/lang/zh/__init__.py:159 
                with open(tempdir / "features.msgpack", "rb") as fileh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c541b0526c3291c8 — Filesystem access.
pkgs/python/[email protected]/spacy/lang/zh/__init__.py:161 
                with open(tempdir / "weights.npz", "rb") as fileh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97bba0facd8e9451 — Filesystem access.
pkgs/python/[email protected]/spacy/lang/zh/__init__.py:200 
                with open(tempdir / "features.msgpack", "wb") as fileh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8af952216a1383b6 — Filesystem access.
pkgs/python/[email protected]/spacy/lang/zh/__init__.py:202 
                with open(tempdir / "weights.npz", "wb") as fileh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4fa6918883755f3 — Filesystem access.
pkgs/python/[email protected]/spacy/pipeline/edit_tree_lemmatizer.py:348 
                with open(p, "rb") as mfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c6bdfe02cfc0d2f — Filesystem access.
pkgs/python/[email protected]/spacy/training/corpus.py:319 
            with open(loc, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1310432ecc9e9c3 — Filesystem access.
pkgs/python/[email protected]/spacy/training/loggers.py:88 
            output_stream = open(output_file, "w", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #592a1bb193afe7a3 — Environment-variable access.
pkgs/python/[email protected]/spacy/util.py:1010 
            env=os.environ.copy(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84713eb4b223f000 — Environment-variable access.
pkgs/python/[email protected]/spacy/util.py:1687 
    value = os.environ.get(env_var, False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc448cdcf9a14cda — Filesystem access.
pkgs/python/[email protected]/spacy/util.py:1780 
        for pkg in (dist.read_text("top_level.txt") or "").split():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

uvicorn

python dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #7d4698317e67c2b0 — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:328 
        if workers is None and "WEB_CONCURRENCY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebae2251f7467ba4 — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:329 
            self.workers = int(os.environ["WEB_CONCURRENCY"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcafe9074eca5c81 — Environment-variable access.
pkgs/python/[email protected]/uvicorn/config.py:333 
            self.forwarded_allow_ips = os.environ.get("FORWARDED_ALLOW_IPS", "127.0.0.1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc575ea753c19812 — Filesystem access.
pkgs/python/[email protected]/uvicorn/config.py:367 
                with open(self.log_config) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c34f2fef624b2167 — Filesystem access.
pkgs/python/[email protected]/uvicorn/config.py:375 
                with open(self.log_config) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • pillow prod — sdist exceeds byte cap
  • opencv-python-headless prod — sdist exceeds byte cap
  • en-core-web-md prod — pypi 404
  • paddlepaddle prod — no sdist (wheels only)