3","score":100,"privacyLevel":null,"analyzedAt":"2023-10-14T13:44:27.000Z","releaseDate":"2023-10-14T13:44:27.000Z","artifactStatus":"divergent"},{"id":6732,"version":"0.0.2","score":100,"privacyLevel":null,"analyzedAt":"2023-10-02T09:13:32.000Z","releaseDate":"2023-10-02T09:13:32.000Z","artifactStatus":"unavailable"},{"id":6731,"version":"0.0.1","score":100,"privacyLevel":null,"analyzedAt":"2023-09-02T21:18:09.000Z","releaseDate":"2023-09-02T21:18:09.000Z","artifactStatus":"unavailable"}],"findings":[{"id":735233,"pluginId":"copy-metadata","version":"0.0.4","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":45,"codeSnippet":"this.app.workspace.getActiveFile","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/wenlzhang/obsidian-copy-metadata/blob/0.0.4/main.ts#L45"},{"id":735234,"pluginId":"copy-metadata","version":"0.0.4","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":66,"codeSnippet":"this.app.fileManager.renameFile","explanation":"Accesses Obsidian API: app.fileManager","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/wenlzhang/obsidian-copy-metadata/blob/0.0.4/main.ts#L66"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"copy-metadata","fromVersion":"0.0.3","toVersion":"0.0.4","files":[],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"0.0.3","initialDiffTo":"0.0.4","summary":"This plugin reads local file metadata such as creation and modification times, then copies it to the system clipboard. It can optionally insert the copied metadata into filenames as text. All operations are local; the plugin has no network activity, uses no Obsidian vault APIs, and includes no code obfuscation.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"braces","packageVersion":"<3.0.3","severity":"high","title":"Uncontrolled resource consumption in braces","advisoryUrl":"https://github.com/advisories/GHSA-grv7-fg5c-xmjg","ghsaId":"GHSA-grv7-fg5c-xmjg","cveId":null,"vulnerableRange":"<3.0.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"cross-spawn","packageVersion":">=7.0.0 <7.0.5","severity":"high","title":"Regular Expression Denial of Service (ReDoS) in cross-spawn","advisoryUrl":"https://github.com/advisories/GHSA-3xgq-45jj-v275","ghsaId":"GHSA-3xgq-45jj-v275","cveId":null,"vulnerableRange":">=7.0.0 <7.0.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"js-yaml","packageVersion":

Copy Metadata