0,"privacyLevel":null,"analyzedAt":"2025-03-28T07:32:39.000Z","releaseDate":"2025-03-28T07:32:39.000Z","artifactStatus":"unavailable"}],"findings":[{"id":783288,"pluginId":"kanban-status-updater","version":"1.0.0","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":61,"codeSnippet":"this.app.workspace.on","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/ankit-kapur/obsidian-kanban-status-updater-plugin/blob/1.0.0/main.ts#L61"},{"id":783289,"pluginId":"kanban-status-updater","version":"1.0.0","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":378,"codeSnippet":"this.app.metadataCache.getFirstLinkpathDest","explanation":"Accesses Obsidian API: app.metadataCache","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/ankit-kapur/obsidian-kanban-status-updater-plugin/blob/1.0.0/main.ts#L378"},{"id":783290,"pluginId":"kanban-status-updater","version":"1.0.0","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":398,"codeSnippet":"this.app.fileManager.processFrontMatter","explanation":"Accesses Obsidian API: app.fileManager","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/ankit-kapur/obsidian-kanban-status-updater-plugin/blob/1.0.0/main.ts#L398"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"","initialDiffTo":"1.0.0","summary":"This plugin automatically updates a 'status' property within your notes whenever you move a card on a Kanban board in Obsidian, performing all operations locally within your vault. It has no network connectivity, makes no external API calls, and does not access any Obsidian Vault APIs—the status updates are written directly to the affected note files. The plugin's only data access involves reading your Kanban board interactions and writing changes to local note metadata.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern","advisoryUrl":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","ghsaId":"GHSA-3ppc-4f35-3m26","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments","advisoryUrl":"https://github.com/advisories/GHSA-7r86-cg39-jmmj","ghsaId":"GHSA-7r86-cg39-jmmj","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.4","severity":"high","title":"minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions","advisoryUrl":"https://github.com/advisories/GHSA-23c5-xmqv-rm74","ghsaId":"GHSA-23c5-xmqv-rm74","cveId":null,"vulnerableRange":"<3.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https://gi

Kanban Status Updater