atlas-best-practices

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The HCL example runs "go run ariga.io/atlas-provider-gorm" as an external program (data.external_schema.gorm), which at runtime fetches and executes remote Go module code from ariga.io/atlas-provider-gorm, making it a runtime-executed external dependency: ariga.io/atlas-provider-gorm