Detected presence of software components with dependencies that are hosted outside the official project repository. (x3)

Detected presence of files containing URLs that link to raw files on GitHub. (x10)

Detected presence of high severity vulnerabilities. (x4)

Detected presence of severe vulnerabilities with active exploitation. (x4)

Detected presence of files containing URLs with suspicious path components. (x2)

Detected presence of files with behaviors commonly used by malicious software. (x1)

Detected presence of medium severity vulnerabilities. (x2)

Detected presence of software components with remotely hosted source dependencies. (x3)

Detected presence of software components that can access user identity information. (x1)

Detected presence of software components authored by developers with anonymous email service accounts. (x1)