ersion":"1.0.4","score":100,"privacyLevel":0,"analyzedAt":"2026-08-14T13:54:24.000Z","releaseDate":"2026-05-28T11:18:46.000Z","artifactStatus":"verified"},{"id":107792,"version":"1.0.3","score":100,"privacyLevel":0,"analyzedAt":"2026-08-14T13:54:14.000Z","releaseDate":"2026-05-28T09:17:05.000Z","artifactStatus":null}],"findings":[{"id":1096509,"pluginId":"frontmatter-input","version":"1.0.4","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":20,"codeSnippet":"this.app.workspace.getActiveFile","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/scottgrayart/Frontmatter-input/blob/refs/tags/1.0.4/main.ts#L20"},{"id":1096510,"pluginId":"frontmatter-input","version":"1.0.4","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":30,"codeSnippet":"this.app.fileManager.processFrontMatter","explanation":"Accesses Obsidian API: app.fileManager","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/scottgrayart/Frontmatter-input/blob/refs/tags/1.0.4/main.ts#L30"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"1.0.3","initialDiffTo":"1.0.4","summary":"This plugin works locally in your vault to read and update markdown frontmatter tags based on checkbox and radio-button inputs in your notes. Confirmed behavior: it does not use Obsidian vault APIs, and no network activity was observed, so it does not send data to any remote service. Capabilities are limited to the note content you interact with; if used, it can change frontmatter in the open markdown files.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.1","source":"npm-audit","isDirect":true,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <=4.1.1","severity":"moderate","title":"JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases","advisoryUrl":"https://github.com/advisories/GHSA-h67p-54hq-rp68","ghsaId":"GHSA-h67p-54hq-rp68","cveId":null,"vulnerableRange":">=4.0.0 <=4.1.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.3.0","severity":"high","title":"js-yaml: YAML merge-key chains can force quadratic CPU consumption","advisoryUrl":"https://github.com/advisories/GHSA-52cp-r559-cp3m","ghsaId":"GHSA-52cp-r559-cp3m","cveId":null,"vulnerableRange":">=4.0.0 <4.3.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":7,"directDeps":0,"transitiveDeps":0}}]]}]

Frontmatter Input