HTTP dependency
Severity
Critical
Description
Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.
Suggestion
Publish the HTTP URL dependency to npm or a private package repository and consume it from there.
Packages with this alert
piskel-cli
Wraps the Piskel pixel editing application to enable similar export options via the command line.
aneutralgiraffe
published 1.0.34 • pm2_alert_sender
Production process manager for Node.JS applications with a built-in load balancer.
haalcala
published 3.1.8 • politeiagui-scripts
You don't become a failure until you're satisfied with being one.
cdk-cloudformation-types
published 0.155.0 •