basercms-unittest

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The document instructs installing and running code fetched from GitHub (baserproject/BcBake at https://github.com/baserproject/BcBake) via composer require and subsequent bin/cake bake commands (and also composer update for robmorgan/phinx), which means remote code would be fetched during runtime and used/executed in the environment.