web-artifacts-builder

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The included scripts run package installation and scaffolding commands at runtime (e.g., pnpm add -D parcel ..., pnpm create vite ..., npm install -g pnpm) which fetch and execute code from the npm registry (https://registry.npmjs.org), so remote content is retrieved and executed as a required runtime dependency.