mermaid-studio

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script scripts/render.mjs defines CDN URL constants for Iconify icon packs that are fetched via fetch() at runtime in Puppeteer templates, but these are remote Unpkg distribution URLs rather than hardcoded operational setup-time dependencies or verified core code installations.