faro-setup-web

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The plain-HTML CDN snippet in frameworks.md loads and executes remote JS at runtime via script tags (s.src = 'https://unpkg.com/@grafana/faro-web-sdk@2/dist/bundle/faro-web-sdk.iife.js' and t.src = 'https://unpkg.com/@grafana/faro-web-tracing@2/dist/bundle/faro-web-tracing.iife.js'), which fetches remote code that will run in the page and is presented as the required dependency for CDN installs.