"id":105572,"version":"0.4.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T16:16:02.000Z","releaseDate":"2026-07-13T12:34:40.000Z","artifactStatus":"verified"},{"id":105571,"version":"0.3.3","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T16:15:51.000Z","releaseDate":"2026-07-12T05:52:20.000Z","artifactStatus":null},{"id":105570,"version":"0.3.2","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T16:15:42.000Z","releaseDate":"2026-07-12T05:50:07.000Z","artifactStatus":null},{"id":105569,"version":"0.3.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T16:15:31.000Z","releaseDate":"2026-07-12T05:31:53.000Z","artifactStatus":null}],"findings":[{"id":1081915,"pluginId":"drag-biolink","version":"0.4.0","category":"permissions_scope","severity":"info","filePath":"src/anchorGlow/anchorController.ts","lineNumber":79,"codeSnippet":"this.app.workspace.on","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/lingxifox/drag-biolink/blob/refs/tags/0.4.0/src/anchorGlow/anchorController.ts#L79"},{"id":1081916,"pluginId":"drag-biolink","version":"0.4.0","category":"permissions_scope","severity":"info","filePath":"src/linker.ts","lineNumber":179,"codeSnippet":"app.metadataCache.getFileCache","explanation":"Accesses Obsidian API: app.metadataCache","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/lingxifox/drag-biolink/blob/refs/tags/0.4.0/src/linker.ts#L179"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"0.3.3","initialDiffTo":"0.4.0","summary":"Drag Bi-Link works entirely inside Obsidian’s editor UI: it reads the text you select and drag, then creates links between matching text across split panes when you use Option/Alt plus the configured selection key. It does not use Obsidian Vault APIs and has no network activity, so it does not send data to any network service. In practice, its data access is limited to the notes and selections you interact with while using the plugin.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName"