rails-docs

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The documentation includes installation commands that fetch-and-execute remote code (e.g. /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)", curl https://mise.run | sh), plus a git clone (https://github.com/rails/rails.git) and NodeSource GPG/RPM URLs (https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key, https://deb.nodesource.com/node_20.x, https://rpm.nodesource.com/pub_20/nodistro/repo/nodesource-release-nodistro-1.noarch.rpm) which are runtime external dependencies that execute remote code during setup.