openrouter-analytics

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The npm package tsx is declared in package.json and fetched from the npm registry without pinned digests or integrity guarantees, constituting an unpinned third-party package dependency from a public registry.