threejs-webgl

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The starter_scene's importmap loads remote JavaScript at runtime from https://cdn.jsdelivr.net/npm/three@0.160.0/build/three.module.js (and the examples path https://cdn.jsdelivr.net/npm/three@0.160.0/examples/jsm/), which are required dependencies fetched and executed in the browser, so they constitute runtime external code execution.