contract-testing

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The referenced GitHub Action (schemathesis/action@v3) specifies an external remote repository locator during setup, but GitHub Actions hosted by third-party repositories without a strong first-party or official vendor claim constitute a common unofficial operational dependency, leading to a medium rating.