gramio-upgrade

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The script fetches package metadata from the public npm registry (registry.npmjs.org), which is a community package registry where outsider-authored package descriptions and metadata can be published.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script in detect-versions.mjs issues a runtime fetch to registry.npmjs.org during package version checks, constituting an operational network dependency on an external registry.