threejs-loaders

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill sets decoder/transcoder paths at runtime that fetch and execute decoding code required for compressed assets (Draco and KTX2), e.g. https://www.gstatic.com/draco/versioned/decoders/1.5.6/ and https://cdn.jsdelivr.net/npm/three@0.183.0/examples/jsm/libs/basis/, which are remote code dependencies used during runtime.