,"version":"1.0.0","score":100,"privacyLevel":0,"analyzedAt":"2024-12-24T12:51:03.000Z","releaseDate":"2024-12-24T12:51:03.000Z","artifactStatus":"divergent"}],"findings":[],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"christmas","fromVersion":"1.0.0","toVersion":"1.0.1","files":[{"path":"src/commands/daysLeft.ts","hunks":"@@ -5,8 +5,8 @@ import ChristmasPlugin from 'main';\n export function daysLeftCommand(plugin: ChristmasPlugin) {\n plugin.addCommand({\n id: \"daysLeft\",\n- name: 'Show Days Left Until Christmas',\n- callback: () => daysLeft(plugin) // Fix this line to call daysLeft correctly\n+ name: 'Show days left until Christmas',\n+ callback: () => daysLeft(plugin)\n });\n }\n \n","securityAnnotations":[]},{"path":"src/services/christmasCountdownCalculator.ts","hunks":"$21","securityAnnotations":[]},{"path":"src/services/configManager.ts","hunks":"@@ -5,6 +5,7 @@ interface ChristmasSettings {\n toggleLargeStatusBarText: boolean;\n ChristmasDay: number;\n ChristmasMonth: number;\n+ toggleSecondsInStatusBar: boolean\n }\n \n const DEFAULT_SETTINGS: Partial = {\n@@ -12,6 +13,7 @@ const DEFAULT_SETTINGS: Partial = {\n toggleLargeStatusBarText: true,\n ChristmasDay: 25,\n ChristmasMonth: 12,\n+ toggleSecondsInStatusBar: true\n };\n \n export class ConfigManager {\n","securityAnnotations":[]},{"path":"src/services/settingsTab.ts","hunks":"$22","securityAnnotations":[]},{"path":"src/services/statusBarManager.ts","hunks":"@@ -9,7 +9,7 @@ export class StatusBarManager {\n private configManager: ConfigManager;\n private daysCalculator: ChristmasDaysCalculator;\n private calculator: ChristmasCountdownCalculator;\n- private readonly loadingStatusBarText: string = \"VSChristmas is starting...\";\n+ private readonly loadingStatusBarText: string = \"Christmas Plugin is starting...\";\n private readonly statusBarIcon: string = \"🎅\";\n \n constructor(private plugin: ChristmasPlugin) {\n","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"1.0.0","initialDiffTo":"1.0.1","summary":"Christmas plugin performs local date calculations to count down to December 25th, with no vault API access, network calls, or code obfuscation. The plugin operates entirely in-memory using JavaScript date functions and stores no persistent data beyond display state. Zero data exfiltration surface or external communication pathways.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype P