7-31T20_14_06_327Z-debug-0.log","artifactDivergenceSummary":null,"activityTier":"active"},"versions":[{"id":104882,"version":"1.0.4","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T09:41:33.000Z","releaseDate":"2026-07-16T17:09:52.000Z","artifactStatus":"unavailable"},{"id":104881,"version":"1.0.3","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T09:41:24.000Z","releaseDate":"2026-07-16T15:15:08.000Z","artifactStatus":null},{"id":104880,"version":"1.0.2","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T09:41:15.000Z","releaseDate":"2026-07-16T02:19:02.000Z","artifactStatus":null},{"id":104879,"version":"1.0.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T09:41:05.000Z","releaseDate":"2026-07-16T00:13:33.000Z","artifactStatus":null},{"id":104878,"version":"1.0.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T09:40:56.000Z","releaseDate":"2026-07-15T23:42:45.000Z","artifactStatus":null}],"findings":[{"id":1078176,"pluginId":"daydeck","version":"1.0.4","category":"permissions_scope","severity":"info","filePath":"main.js","lineNumber":1836,"codeSnippet":"this.app.workspace.getLeavesOfType","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/shivrajrath/daydeck/blob/refs/tags/1.0.4/main.js#L1836"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"1.0.3","initialDiffTo":"1.0.4","summary":"Confirmed: DayDeck does not use Obsidian vault APIs and has no recorded network activity, so the documented behavior is local to the plugin itself. It does not send data to any network endpoint in the available metadata. No capability to access vault files through Obsidian’s standard APIs or to send data externally is documented here.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cv