HTTP dependency

Severity

High

Description

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Suggestion

Publish the HTTP URL dependency to npm or a private package repository and consume it from there.

Packages with this issue

No packages