1. CodeQL Flags Command Injection Risk in neilcochran/squawk Repository Build Script
A CodeQL automated security scan has identified three instances of indirect uncontrolled command line injection vulnerabilities in the neilcochran/squawk project. The flaws reside in scripts/build-data.js at lines 122, 139, and 155, where the codebase uses execSync() with string interpolation—a pattern that allows mali...