build-and-dependency

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The Quick Start and container instructions fetch and run remote code—e.g., git clone https://github.com/NVIDIA-NeMo/Megatron-Bridge (and its submodule) and pulling/running the container image nvcr.io/nvidia/nemo:—which are runtime external dependencies whose fetched content will be built/executed.