networkApis":[],"fsApis":[],"execApis":[],"obfuscationMarkers":[]},"diffStats":{"totalLinesChanged":2,"percentChanged":33.33}},"activityTier":"active"},"versions":[{"id":12408,"version":"0.1.0","score":85,"privacyLevel":null,"analyzedAt":"2026-03-06T22:37:34.000Z","releaseDate":"2026-03-06T22:37:34.000Z","artifactStatus":"divergent"}],"findings":[{"id":762266,"pluginId":"frontmatter-to-html-attributes","version":"0.1.0","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":41,"codeSnippet":"this.app.workspace.on","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/IllDepence/obsidian-frontmatter-to-html-attributes/blob/0.1.0/src/main.ts#L41"},{"id":762267,"pluginId":"frontmatter-to-html-attributes","version":"0.1.0","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":46,"codeSnippet":"this.app.metadataCache.on","explanation":"Accesses Obsidian API: app.metadataCache","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/IllDepence/obsidian-frontmatter-to-html-attributes/blob/0.1.0/src/main.ts#L46"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"","initialDiffTo":"0.1.0","summary":"This plugin reads YAML frontmatter from your notes and converts it into HTML data-* attributes, allowing CSS rules to target and style content based on that metadata. All processing occurs locally within your vault—it does not use Obsidian APIs, send data to external endpoints, or perform network activity. The plugin's functionality is purely a local transformation layer between metadata and HTML styling, with no data exfiltration or obfuscation mechanisms.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryUrl":"https://github.com/advisories/GHSA-mh29-5h37-fv8m","ghsaId":"GHSA-mh29-5h37-fv8m","cveId":null,"vulnerableRange":">=4.0.0 <4.1.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern"

Frontmatter to HTML Attributes