3-31T16:20:23.000Z","releaseDate":"2025-03-31T16:20:23.000Z","artifactStatus":"divergent"}],"findings":[{"id":738239,"pluginId":"daily-note-automater","version":"1.0.0","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":56,"codeSnippet":"this.app.workspace.onLayoutReady","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/davidpedrero/obsidian-daily-notes-automater/blob/1.0.0/main.ts#L56"},{"id":738240,"pluginId":"daily-note-automater","version":"1.0.0","category":"vault_access","severity":"info","filePath":"main.ts","lineNumber":88,"codeSnippet":" 85 | \t\tconst { vault } = this.app;\n 86 | \n 87 | \t\t// If Daily Note already exists, terminate plug-in\n> 88 | \t\tif (vault.getAbstractFileByPath(newFilePath)) {\n 89 | \t\t\tif (PRINT_LOGS) console.log(\"Daily Note already exists!\");\n 90 | \t\t\treturn;\n 91 | \t\t}","explanation":"Checks if a daily note file already exists before creating a new one","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/davidpedrero/obsidian-daily-notes-automater/blob/1.0.0/main.ts#L88"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"","initialDiffTo":"1.0.0","summary":"The plugin accesses the local vault filesystem to check if a daily note file already exists before creating a new one. There is no network activity, so no data is transmitted externally. The plugin has no obfuscation and operates only on local files. Based on the available information, the plugin performs straightforward local file operations without external communication.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryUrl":"https://github.com/advisories/GHSA-mh29-5h37-fv8m","ghsaId":

Daily Notes Automater