":"The plugin reads all markdown files in your vault and can also read a single vault file by path, which lets it inspect note content for CRM features like mentions and interaction tracking. It sends data to LemonSqueezy for license validation, and it can send data to Anthropic or OpenAI when AI-powered follow-up suggestions are used. The listed network requests are outbound only, with no obfuscation reported.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.1","source":"npm-audit","isDirect":true,"path":null},{"packageName":"fast-uri","packageVersion":"<=3.1.0","severity":"high","title":"fast-uri vulnerable to path traversal via percent-encoded dot segments","advisoryUrl":"https://github.com/advisories/GHSA-q3j6-qgpj-74h6","ghsaId":"GHSA-q3j6-qgpj-74h6","cveId":null,"vulnerableRange":"<=3.1.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":"<=3.1.1","severity":"high","title":"fast-uri vulnerable to host confusion via percent-encoded authority delimiters","advisoryUrl":"https://github.com/advisories/GHSA-v39h-62p7-jpjc","ghsaId":"GHSA-v39h-62p7-jpjc","cveId":null,"vulnerableRange":"<=3.1.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":">=3.0.0 <=3.1.3","severity":"high","title":"fast-uri vulnerable to host confusion via literal backslash authority delimiter","advisoryUrl":"https://github.com/advisories/GHSA-v2hh-gcrm-f6hx","ghsaId":"GHSA-v2hh-gcrm-f6hx","cveId":null,"vulnerableRange":">=3.0.0 <=3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":">=3.0.0 <3.1.3","severity":"high","title":"fast-uri vulnerable to host confusion via failed IDN canonicalization","advisoryUrl":"https://github.com/advisories/GHSA-4c8g-83qw-93j6","ghsaId":"GHSA-4c8g-83qw-93j6","cveId":null,"vulnerableRange":">=3.0.0 <3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <=4.1.1","severity":"moderate","title":"JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases","advisoryUrl":"ht

Arcadia Connect