Date":"2024-03-10T01:29:44.000Z","artifactStatus":"verified"},{"id":8186,"version":"0.1.2","score":100,"privacyLevel":null,"analyzedAt":"2024-03-09T01:38:21.000Z","releaseDate":"2024-03-09T01:38:21.000Z","artifactStatus":"verified"},{"id":8185,"version":"0.1.1","score":100,"privacyLevel":null,"analyzedAt":"2024-02-29T10:06:34.000Z","releaseDate":"2024-02-29T10:06:34.000Z","artifactStatus":"verified"},{"id":8184,"version":"0.1.0","score":100,"privacyLevel":null,"analyzedAt":"2024-02-25T14:47:39.000Z","releaseDate":"2024-02-25T14:47:39.000Z","artifactStatus":"verified"}],"findings":[],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"date-inserter","fromVersion":"0.6.7","toVersion":"0.6.8","files":[],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"0.6.7","initialDiffTo":"0.6.8","summary":"Date-inserter is a local-only utility plugin that inserts formatted dates into the editor via a calendar UI, requiring no vault API access, file system permissions, or network connectivity. The plugin operates entirely within Obsidian's editor context with no confirmed data access beyond the immediate insertion point. No network activity, data exfiltration capabilities, or obfuscation mechanisms were detected.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.0.3","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":">=2.0.0 <2.0.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https://github.com/advisories/GHSA-3v7f-55p6-f55p","ghsaId":"GHSA-3v7f-55p6-f55p","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"high","title":"Picomatch has a ReDoS vulnerability via extglob quantifiers","advisoryUrl":"https://github.com/advisories/GHSA-c2c7-rcm5-vvqj","ghsaId":"GHSA-c2c7-rcm5-vvqj","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"yaml","packageVersion":">=2.0.0 <2.8.3","severity":"moderate","title":"yaml is vulnerable to Stack Overflow via deeply nested YAML collections","advisoryUrl":"https://github.com/advisories/GHSA-48c2-rrv3-qjmp","ghsaId":"GHSA-48c2-rrv3-qjmp","cveId":null,"vulnerableRange":">=2.0.0 <2.8.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":15,"directDeps":1,"transitiveDeps":0}}]]}]

Date Inserter