:0,"analyzedAt":"2025-04-20T16:03:30.000Z","releaseDate":"2025-04-20T16:03:30.000Z","artifactStatus":"verified"},{"id":7507,"version":"0.1.5","score":100,"privacyLevel":0,"analyzedAt":"2025-04-15T07:10:49.000Z","releaseDate":"2025-04-15T07:10:49.000Z","artifactStatus":"unavailable"},{"id":7506,"version":"0.1.4","score":100,"privacyLevel":0,"analyzedAt":"2025-04-14T14:36:14.000Z","releaseDate":"2025-04-14T14:36:14.000Z","artifactStatus":"verified"},{"id":7505,"version":"0.1.3","score":100,"privacyLevel":0,"analyzedAt":"2025-04-14T14:14:38.000Z","releaseDate":"2025-04-14T14:14:38.000Z","artifactStatus":"verified"},{"id":7504,"version":"0.1.2","score":100,"privacyLevel":0,"analyzedAt":"2025-04-14T14:07:53.000Z","releaseDate":"2025-04-14T14:07:53.000Z","artifactStatus":"unavailable"},{"id":7503,"version":"0.1.1","score":100,"privacyLevel":0,"analyzedAt":"2025-04-11T18:32:43.000Z","releaseDate":"2025-04-11T18:32:43.000Z","artifactStatus":"unavailable"},{"id":7502,"version":"0.1.0","score":100,"privacyLevel":0,"analyzedAt":"2025-04-11T16:21:37.000Z","releaseDate":"2025-04-11T16:21:37.000Z","artifactStatus":"unavailable"}],"findings":[{"id":991613,"pluginId":"cut-the-fluff","version":"0.2.0","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":115,"codeSnippet":"this.app.workspace.updateOptions","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/adamfletcher/obsidian-cut-the-fluff/blob/0.2.0/main.ts#L115"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"0.1.6","initialDiffTo":"0.2.0","summary":"The plugin appears to work entirely inside Obsidian: it does not use Vault APIs, and no network activity is reported, so it does not send note content to external services under the documented behavior. Its function is to analyze writing for unnecessary complexity and clutter locally, with no indicated capability to transmit data over the network.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.1","source":"npm-audit","isDirect":true,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <=4.1.1","severity":"moderate","title":"JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases","advisoryUrl":"https://github.com/advisories/GHSA-h67p-54hq-rp68","ghsaId":"GHSA-h67p-54hq-rp68","cveId":null,"vulnerableRange":">=4.0.0 <=4.1.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.3.0","severity":"high","title":"js-yaml: YAML merge-key chains can

Cut The Fluff