rences":2,"additionalLocations":[{"filePath":"src/SettingsTab.ts","lineNumber":74,"codeSnippet":" 71 | \t\tadditionalStatesDescEl.createEl('h3', { text: `Additional states` });\n 72 | additionalStatesDescEl.createEl(\"p\").append(\n 73 | fragment.createEl('a', {\n> 74 | \t\t\t\thref: 'https://github.com/colineckert/obsidian-things/blob/main/assets/checkbox-styles.png',\n 75 | \t\t\t\ttext: 'Quick reference',\n 76 | \t\t\t}),\n 77 | );","sourceUrl":"https://github.com/KubaMiszcz/MultiStateCheckBoxSwitcher/blob/1.0.4/src/SettingsTab.ts#L74"}]}],"resolvedFindings":[],"scoreChange":-16}},"initialDiffFrom":"1.0.1","initialDiffTo":"1.0.4","summary":"The multi-state-checkbox-switcher plugin is a lightweight UI utility that intercepts checkbox click events to cycle through multiple states, with no vault data access or Obsidian API usage. It performs no network requests and contains no obfuscated code, functioning entirely as a local interaction handler. The plugin operates only on the DOM elements it directly modifies and has no capability to access, transmit, or persist any user data outside its immediate checkbox-cycling function.","dependencyVulnerabilities":[{"packageName":"braces","packageVersion":"<3.0.3","severity":"high","title":"Uncontrolled resource consumption in braces","advisoryUrl":"https://github.com/advisories/GHSA-grv7-fg5c-xmjg","ghsaId":"GHSA-grv7-fg5c-xmjg","cveId":null,"vulnerableRange":"<3.0.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"micromatch","packageVersion":"<4.0.8","severity":"moderate","title":"Regular Expression Denial of Service (ReDoS) in micromatch","advisoryUrl":"https://github.com/advisories/GHSA-952p-6rrq-rcjv","ghsaId":"GHSA-952p-6rrq-rcjv","cveId":null,"vulnerableRange":"<4.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https://github.com/advisories/GHSA-3v7f-55p6-f55p","ghsaId":"GHSA-3v7f-55p6-f55p","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"high","title":"Picomatch has a ReDoS vulnerability via extglob quantifiers","advisoryUrl":"https://github.com/advisories/GHSA-c2c7-rcm5-vvqj","ghsaId":"GHSA-c2c7-rcm5-vvqj","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":8,"directDeps":0,"transitiveDeps":0}}]]}]

Multi State CheckBox Switcher