Socket
Socket
Sign inDemoInstall

HTTP dependency

Severity

Critical

Description

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Suggestion

Publish the HTTP URL dependency to npm or a private package repository and consume it from there.


Packages with this alert

2345
32Next
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc