4T21:36:25.000Z","artifactStatus":"verified"},{"id":102045,"version":"1.3.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-12T07:29:14.000Z","releaseDate":"2026-07-03T21:43:29.000Z","artifactStatus":null},{"id":4273,"version":"1.2.1","score":100,"privacyLevel":0,"analyzedAt":"2024-12-29T16:06:29.000Z","releaseDate":"2024-12-29T16:06:29.000Z","artifactStatus":"verified"},{"id":4272,"version":"1.2.0","score":100,"privacyLevel":0,"analyzedAt":"2024-12-29T08:37:22.000Z","releaseDate":"2024-12-29T08:37:22.000Z","artifactStatus":"verified"},{"id":4271,"version":"1.1.0","score":100,"privacyLevel":0,"analyzedAt":"2024-11-29T03:04:22.000Z","releaseDate":"2024-11-29T03:04:22.000Z","artifactStatus":"verified"},{"id":4270,"version":"1.0.1","score":100,"privacyLevel":0,"analyzedAt":"2024-11-08T06:52:48.000Z","releaseDate":"2024-11-08T06:52:48.000Z","artifactStatus":"verified"},{"id":4269,"version":"1.0.0","score":100,"privacyLevel":0,"analyzedAt":"2024-10-10T08:22:16.000Z","releaseDate":"2024-10-10T08:22:16.000Z","artifactStatus":"unavailable"}],"findings":[{"id":1062470,"pluginId":"callout-toggles","version":"1.3.1","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":11,"codeSnippet":"this.app.workspace.onLayoutReady","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/alythobani/obsidian-callout-toggles/blob/refs/tags/1.3.1/src/main.ts#L11"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"1.3.0","initialDiffTo":"1.3.1","summary":"The plugin’s confirmed behavior is to add, switch, or remove callout markup in your notes through its commands, and it does this locally in Obsidian. It does not use Obsidian vault APIs, and no network activity was observed, so it does not send data to any server in the documented behavior. If you trigger one of its commands, it can modify the text of the active note, but there is no evidence here that it accesses other vault data.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=3.0.0 <5.0.7","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=3.0.0 <5.0.7","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":">=3.0.0 <=3.1.3","severity":"high","title":"fast-uri vulnerable to host confusion via literal backslash authority delimiter","advisoryUrl":"https://github.com/advisories/GHSA-v2hh-gcrm-f6hx","ghsaId":"GHSA-v2hh-gcrm-f6hx","cveId":null,"vulnerableRange":">=3.0.0 <=3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":">=3.0.0 <3.1.3","severity":"high"

Callout Toggles