ull,"artifactStatus":"verified","artifactUnavailableReason":null,"artifactDivergenceSummary":null,"activityTier":"active"},"versions":[{"id":112061,"version":"1.0.0","score":93,"privacyLevel":1,"analyzedAt":"2026-08-16T08:58:55.000Z","releaseDate":"2026-07-24T08:50:36.000Z","artifactStatus":"verified"}],"findings":[{"id":1125132,"pluginId":"live-tennis","version":"1.0.0","category":"network_calls","severity":"info","filePath":"src/api.ts","lineNumber":76,"codeSnippet":" 73 | \t\t\t)\n 74 | \t\t\t.join('&');\n 75 | \t\tconst url = `${API_BASE}${path}${search ? `?${search}` : ''}`;\n> 76 | \t\tconst response = await requestUrl({\n 77 | \t\t\turl,\n 78 | \t\t\theaders: { 'X-API-Key': key },\n 79 | \t\t\tthrow: false,","explanation":"requestUrl() makes a network request to api.livetennisapi.com (https://api.livetennisapi.com/api/public/v1)","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/livetennisapi/obsidian-live-tennis/blob/refs/tags/1.0.0/src/api.ts#L76"}],"factors":null,"networkEndpoints":[{"host":"api.livetennisapi.com","url":null,"filePath":"src/api.ts","lineNumber":76,"codeSnippet":" 73 | \t\t\t)\n 74 | \t\t\t.join('&');\n 75 | \t\tconst url = `${API_BASE}${path}${search ? `?${search}` : ''}`;\n> 76 | \t\tconst response = await requestUrl({\n 77 | \t\t\turl,\n 78 | \t\t\theaders: { 'X-API-Key': key },\n 79 | \t\t\tthrow: false,","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"hardcoded-url"}],"initialDiff":null,"initialDiffFrom":"","initialDiffTo":"1.0.0","summary":"This plugin does not use Obsidian vault APIs, so it is not confirmed to read or modify your notes directly beyond the content it creates. It sends network requests to `api.livetennisapi.com` via `requestUrl()` to fetch live tennis scores and related match or player data. When you trigger its embed or “freeze” features, it can write the retrieved tennis information into your notes as permanent markdown snapshots.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":">=3

Live Tennis