react-modernization

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The codemod commands (e.g., npx jscodeshift -t https://raw.githubusercontent.com/reactjs/react-codemod/master/transforms/rename-unsafe-lifecycles.js and the other https://raw.githubusercontent.com/reactjs/react-codemod/... transform URLs) fetch remote transform scripts at runtime and execute them via jscodeshift, so external code is downloaded and run as part of the skill.