For AI agents: the complete documentation index is available at https://mfdoctor.kevinbeier.com/1.0.0/llms.txt, the full documentation bundle is available at https://mfdoctor.kevinbeier.com/1.0.0/llms-full.txt, and this page is available as Markdown at https://mfdoctor.kevinbeier.com/1.0.0/rules/config/remote-http-insecure.md.
MFDoctor
  • English
  • 1.0.0

      • config/remote-http-insecure

      • Category: security
      • Default severity: warning

      Issue

      Remote code fetched over plain HTTP can be changed in transit.

      How to fix it

      Serve non-local remotes over HTTPS and keep HTTP only for local development.

      Suppress or retarget with rules["config/remote-http-insecure"] set to "off" or a severity — see Suppressions and allowlists.

      Sources