edAt":"2026-08-16T17:17:12.000Z","releaseDate":"2026-05-30T12:40:46.000Z","artifactStatus":null},{"id":112863,"version":"0.2.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-16T17:17:02.000Z","releaseDate":"2026-05-30T12:34:04.000Z","artifactStatus":null},{"id":112862,"version":"0.1.2","score":100,"privacyLevel":0,"analyzedAt":"2026-08-16T17:16:52.000Z","releaseDate":"2026-05-16T19:59:57.000Z","artifactStatus":null},{"id":112861,"version":"0.1.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-16T17:16:41.000Z","releaseDate":"2026-05-16T19:44:51.000Z","artifactStatus":null},{"id":112860,"version":"0.1.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-16T17:16:31.000Z","releaseDate":"2026-05-16T12:02:35.000Z","artifactStatus":null}],"findings":[{"id":1131365,"pluginId":"markr","version":"0.2.2","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":45,"codeSnippet":"this.app.workspace.updateOptions","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/visua1hue/obsidian-markr/blob/refs/tags/0.2.2/src/main.ts#L45"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"0.2.1","initialDiffTo":"0.2.2","summary":"Confirmed: Markr uses no Obsidian vault APIs and no network activity was observed, so the available metadata shows no direct access to vault files through the standard API and no outbound traffic. Capability: it can handle trigger-based list and task markers locally when you use it, but there is no reported network feature that would send data to a remote service.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":">=3.0.0 <=3