project-setup-c

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). ovrtx.cmake's ovrtx_fetch uses FetchContent_Declare to download the ovrtx binary package from a GitHub Releases URL (the FetchContent_Declare GitHub Releases URL in ovrtx.cmake, e.g. https://github.com/.../releases/...) at build/runtime, which fetches required binary code that will be executed by the built program.