code-apps

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). Flagging the GitHub template reference (npx degit github:microsoft/PowerAppsCodeApps/templates/vite — repo: https://github.com/microsoft/PowerAppsCodeApps) because the CLI workflow explicitly instructs fetching that remote repository and running install/CLI commands (e.g., npm install / pac/npx commands), which pulls and executes remote code as a required scaffolding step.