react-native-reusables

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The docs show the CLI fetching registry items by URL at runtime (e.g. "npx react-native-reusables add http://localhost:3000/r/hello-world.json" and the registry-item pattern "http://reactnativereusables.com/r/new-york/<COMPONENT_NAME>.json"), which the tool downloads and uses to scaffold code—so external content retrieved at runtime can directly control what code/files are added.