ppet":" 137 | \t\tconst desc = containerEl.createEl(\"p\");\n 138 | \t\tdesc.classList.add(\"lawlist-settings-desc\");\n 139 | \t\tdesc.appendText(\"Need help? Check the \");\n> 140 | \t\tdesc.appendChild(createEl(\"a\", { text: \"README\", href: \"https://github.com/willem-schlieter/lawlist\" }));\n 141 | \t\tdesc.appendText(\"!\");\n 142 | \t\tdesc.appendChild(createEl(\"br\"));\n 143 | \t\tdesc.appendChild(createEl(\"br\"));","explanation":"Hardcoded URL found: github.com (https://github.com/willem-schlieter/lawlist) (allowlisted)","networkType":"passive","host":"github.com","sourceUrl":"https://github.com/willem-schlieter/lawlist/blob/1.1.0/src/main.ts#L140"}}]},{"path":"src/patterns.ts","hunks":"$24","securityAnnotations":[]},{"path":"src/view_plugin.ts","hunks":"$25","securityAnnotations":[]},{"path":"view_plugin.ts","hunks":"$26","securityAnnotations":[]}],"securityDelta":{"newFindings":[{"category":"network_calls","severity":"high","filePath":"src/main.ts","lineNumber":140,"codeSnippet":" 137 | \t\tconst desc = containerEl.createEl(\"p\");\n 138 | \t\tdesc.classList.add(\"lawlist-settings-desc\");\n 139 | \t\tdesc.appendText(\"Need help? Check the \");\n> 140 | \t\tdesc.appendChild(createEl(\"a\", { text: \"README\", href: \"https://github.com/willem-schlieter/lawlist\" }));\n 141 | \t\tdesc.appendText(\"!\");\n 142 | \t\tdesc.appendChild(createEl(\"br\"));\n 143 | \t\tdesc.appendChild(createEl(\"br\"));","explanation":"Hardcoded URL found: github.com (https://github.com/willem-schlieter/lawlist) (allowlisted)","networkType":"passive","host":"github.com","sourceUrl":"https://github.com/willem-schlieter/lawlist/blob/1.1.0/src/main.ts#L140"}],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"1.0.0","initialDiffTo":"1.1.0","summary":"The lawlist plugin adds customizable list styling for both edit and read modes in Obsidian, with no access to vault data or external network communication. It operates entirely within the visual layer and does not interact with Obsidian's core APIs or send any data outside the vault.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advis

LawList: Custom List Styles