26-08-13T09:57:35.000Z","releaseDate":"2026-07-20T14:35:27.000Z","artifactStatus":"verified"},{"id":104912,"version":"1.1.4","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T09:57:26.000Z","releaseDate":"2026-07-17T04:22:03.000Z","artifactStatus":null},{"id":104911,"version":"1.1.3","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T09:57:16.000Z","releaseDate":"2026-07-17T04:16:06.000Z","artifactStatus":null},{"id":104910,"version":"1.1.2","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T09:57:07.000Z","releaseDate":"2026-07-17T03:42:36.000Z","artifactStatus":null},{"id":104909,"version":"1.1.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T09:56:57.000Z","releaseDate":"2026-07-17T03:21:04.000Z","artifactStatus":null},{"id":104908,"version":"1.1.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T09:56:48.000Z","releaseDate":"2026-07-17T02:31:37.000Z","artifactStatus":null}],"findings":[{"id":1078309,"pluginId":"daytask","version":"1.1.5","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":62,"codeSnippet":"this.app.workspace.layoutReady","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/peanutup/AgendaPane/blob/refs/tags/1.1.5/main.ts#L62"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"1.1.4","initialDiffTo":"1.1.5","summary":"AgendaPane is a local sidebar calendar for planning one-off and recurring tasks, and it does not use Obsidian vault APIs to read from or write to Markdown notes. In the observed package, it made no network requests, so it does not send data to any external service based on confirmed behavior. Its practical capability is limited to handling the task information you enter in its own interface locally.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x