Thanks for reporting this. Fixed: https://socket.dev/npm/package/@ledgerhq/connect-kit-loader/overview/1.1.2 https://socket.dev/npm/package/@ledgerhq/connect-ki

Thanks for reporting this. Fixed: https://socket.dev/npm/package/@ledgerhq/connect-kit-loader/overview/1.1.2 https://socket.dev/npm/package/@ledgerhq/connect-kit-loader/... We don't currently detect 'implicit dependencies' loaded via CDN URLs, though we'll look into what it would take to support this.