arcgis-coordinates-projection
Warn
Audited by Snyk on Feb 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The example HTML loads and executes remote JavaScript at runtime from the ArcGIS CDN (e.g. https://js.arcgis.com/calcite-components/3.3.3/calcite.esm.js and https://js.arcgis.com/4.34/), which are required dependencies and thus cause remote code to be fetched and executed in the agent's runtime.
Audit Metadata