package-neon-green

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The script fetches code and runtime configuration dependencies from external GitHub repositories (https://github.com/getcolors/neon.git, green.git, once.git) using personal/project organization ownership without enforced cryptographic digests or signatures, placing them under weak/unknown provenance.