e,"sourceUrl":"https://github.com/manogna4/obsidian-koncham-workspace/blob/0.0.3/main.ts#L18"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"koncham-workspace","fromVersion":"0.0.2","toVersion":"0.0.3","files":[{"path":"main.js","hunks":"$21","securityAnnotations":[]},{"path":"main.ts","hunks":"$22","securityAnnotations":[{"lineNumber":24,"type":"resolved_finding","finding":{"category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":24,"codeSnippet":"this.app.vault.on","explanation":"Accesses Obsidian API: app.vault","sourceUrl":"https://github.com/manogna4/obsidian-koncham-workspace/blob/0.0.2/main.ts#L24"}}]}],"securityDelta":{"newFindings":[],"resolvedFindings":[{"category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":24,"codeSnippet":"this.app.vault.on","explanation":"Accesses Obsidian API: app.vault","sourceUrl":"https://github.com/manogna4/obsidian-koncham-workspace/blob/0.0.2/main.ts#L24"}],"scoreChange":0}},"initialDiffFrom":"0.0.2","initialDiffTo":"0.0.3","summary":"The koncham-workspace plugin manages workspace configuration without accessing vault data through Obsidian APIs. The plugin demonstrates no network communication, making external data transmission impossible. With no detected obfuscation and a clearly limited API surface, the plugin's operations are transparent to inspection. The undefined privacy level suggests the developer has not formally documented data handling practices, though the technical analysis indicates minimal data exposure risk.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.0.5","severity":"high","title":"minimatch ReDoS vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-f8q6-p94x-37v3","ghsaId":"GHSA-f8q6-p94x-37v3","cveId":null,"vulnerableRange":"<3.0.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern","advisoryUrl":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","ghsaId":"GHSA-3ppc-4f35-3m26","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments","advisoryUrl":"https://github.com/advisories/GHSA-7r86-cg39-jmmj","ghsaId":"GHSA-7r86-cg39-jmmj","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.4","severity":"high","title":"minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions","advisoryUrl":"https://github.com/advisories/GHSA-23c5-xmqv-rm74","ghsaId":"GHSA-23c5-xmqv-rm74","cveId":null,"vulnerableRange":"<3.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"path-parse","packageVersion":"<1.0.7","severity":"moderate","title":"Regular Expression Denial of Service in path-parse","advisoryUrl":"https://github.com/advisories/GHSA-hj48-42vr-x3v9","ghsaId":"GHSA-hj48-42vr-x3v9","cveId":null,"vulnerableRange":"<1.0.7","fixA

koncham workspace