package-signoz-red

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script fetches a pinned GitHub repository github:getcolors/signoz#0c03be539d7d8d9f9a67186abf63747232e060a2 at runtime using Bun, and getcolors is a common/reputable unofficial publisher rather than an officially recognized first-party organization.