shadcn-errors-tailwind-v3-v4-migration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The runbook explicitly instructs executing remote packages at runtime (e.g., "npx @tailwindcss/upgrade" — https://www.npmjs.com/package/@tailwindcss/upgrade — and pnpm dlx shadcn@latest ...), which fetches and runs remote code as a required step, so this is a runtime external dependency that executes code.