ce","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/RyotaUshio/obsidian-inline-math/blob/0.3.6/src/main.ts#L57"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"inline-math","fromVersion":"0.3.5","toVersion":"0.3.6","files":[{"path":"src/cleaner.ts","hunks":"$21","securityAnnotations":[]},{"path":"src/main.ts","hunks":"$22","securityAnnotations":[]},{"path":"src/settings.ts","hunks":"@@ -52,10 +52,13 @@ export class NoMoreFlickerSettingTab extends PluginSettingTab {\n })\n });\n \n- containerEl.createEl(\"h4\", { text: \"Debug mode\" })\n+ new Setting(containerEl)\n+ .setName(\"Debug mode\")\n+ .setHeading();\n+\n new Setting(containerEl)\n .setName(\"Disable decorations\")\n- .setDesc(\"If turned on, decorations to hide braces adjacent to dollar signs are disabled.\")\n+ .setDesc(\"If turned on, decorations to hide braces adjacent to dollar signs are disabled. This is especially useful when you want to see what this plugin does under the hood.\")\n .addToggle((toggle) => {\n toggle.setValue(this.plugin.settings.disableDecorations)\n .onChange(async (disable) => {\n","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"0.3.5","initialDiffTo":"0.3.6","summary":"The inline-math plugin modifies how mathematical equations render in Obsidian notes to prevent visual flickering, operating entirely locally without vault data access. It performs no network communication, uses no Obsidian APIs, and contains no obfuscation. The plugin functions as a pure display-layer enhancement with no capability to transmit data or access sensitive vault contents.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"cross-spawn","packageVersion":">=7.0.0 <7.0.5","severity":"high","title":"Regular Expression Denial of Service (ReDoS) in cross-spawn","advisoryUrl":"https://github.com/advisories/GHSA-3xgq-45jj-v275","ghsaId":"GHSA-3xgq-45jj-v275","cveId":null,"vulnerableRange":">=7.0.0 <7.0.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted",

No more flickering inline math