react-native-best-practices

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The bundle code-splitting example configures ScriptManager to resolve and load runtime chunks from a production CDN (example URL https://my-cdn.com/assets/${scriptId}), which means the app will fetch and execute remote JavaScript bundles at runtime and thus relies on externally hosted code being available and trusted.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 09:41 PM