1T13:50:04.000Z","releaseDate":"2025-03-31T13:50:04.000Z","artifactStatus":"unavailable"},{"id":8991,"version":"1.0.6","score":100,"privacyLevel":null,"analyzedAt":"2025-03-27T19:08:11.000Z","releaseDate":"2025-03-27T19:08:11.000Z","artifactStatus":"unavailable"},{"id":8990,"version":"1.0.5","score":100,"privacyLevel":null,"analyzedAt":"2025-03-26T14:00:05.000Z","releaseDate":"2025-03-26T14:00:05.000Z","artifactStatus":"unavailable"},{"id":8989,"version":"1.0.4","score":100,"privacyLevel":null,"analyzedAt":"2025-03-25T20:44:54.000Z","releaseDate":"2025-03-25T20:44:54.000Z","artifactStatus":"unavailable"},{"id":8988,"version":"1.0.2","score":100,"privacyLevel":null,"analyzedAt":"2025-03-25T20:19:32.000Z","releaseDate":"2025-03-25T20:19:32.000Z","artifactStatus":"divergent"},{"id":8987,"version":"1.0.1","score":100,"privacyLevel":null,"analyzedAt":"2025-03-20T00:26:27.000Z","releaseDate":"2025-03-20T00:26:27.000Z","artifactStatus":"unavailable"}],"findings":[],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"draw-steel-retainer","fromVersion":"1.0.18","toVersion":"1.0.19","files":[{"path":"lib/Models/Constants.ts","hunks":"$20","securityAnnotations":[]},{"path":"lib/Views/InitiativeTrackerView.ts","hunks":"$21","securityAnnotations":[]},{"path":"lib/main.ts","hunks":"$22","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"1.0.18","initialDiffTo":"1.0.19","summary":"The draw-steel-retainer plugin provides UI sidebar tools for managing the TTRPG Draw Steel system, designed for game directors. It does not access vault contents, make network requests, or communicate with external services. The plugin operates entirely within Obsidian's UI layer without data transmission or external dependencies.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryUrl":"https://github.com/advisories/GHSA-mh29-5h37-fv8m","ghsaId":"GHSA-mh29-5h37-fv8m","cveId":null,"vulnerableRange":">=4.0.0 <4.1.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern","advisoryUrl":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","ghsaId":"GHSA-3ppc-4f35-3m26","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has ReDoS: matchOne() combinatorial backtrack

Draw Steel Retainer