Missing request timeout or retry protection
External calls should define timeout, cancellation, or retry behavior before they enter security-sensitive flows.
#Metadata
#Why it matters
Authentication and dependency calls that have neither timeout nor retry protection fail unpredictably under network stress.
#Remediation
Add explicit timeout or cancellation support, wrap the call in retry handling, or do both when the dependency is critical.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/typescript/ts.security.missing-request-timeout-or-retry.rule.yaml.