package-langfuse-red

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The launcher script dynamically downloads and executes pinned GitHub repositories via Bun (github:getcolors/...), which constitute unverifiable runtime external dependencies with weak or unknown provenance.