: {\n 234 | \t\t\t\t...getDockerEnv(),","networkType":"active-outbound","sendsData":true,"dataDescription":"child_process.spawn() executes a shell command — review for network access","endpointSource":"unresolved"},{"host":"","url":null,"filePath":"src/utils/docker.ts","lineNumber":299,"codeSnippet":" 296 | \n 297 | \treturn new Promise((resolve, reject) => {\n 298 | \t\tlet output = '';\n> 299 | \t\tconst proc = spawn(getDockerBin(), ['compose', 'run', '--rm', 'pipeline', mdRelPath], {\n 300 | \t\t\tcwd: pipelineDir,\n 301 | \t\t\tenv: { ...getDockerEnv(), VAULT_PATH: vaultPath },\n 302 | \t\t\twindowsHide: true,","networkType":"active-outbound","sendsData":true,"dataDescription":"child_process.spawn() executes a shell command — review for network access","endpointSource":"unresolved"},{"host":"","url":null,"filePath":"src/utils/preflight.ts","lineNumber":9,"codeSnippet":" 6 | \n 7 | function execFilePromise(cmd: string, args: string[], timeout = 5000): Promise<{ stdout: string }> {\n 8 | \treturn new Promise((resolve, reject) => {\n> 9 | \t\tconst proc = execFile(\n 10 | \t\t\tcmd,\n 11 | \t\t\targs,\n 12 | \t\t\t{ timeout, windowsHide: true, env: getDockerEnv() },","networkType":"active-outbound","sendsData":true,"dataDescription":"child_process.execFile() executes a shell command — review for network access","endpointSource":"unresolved"}],"initialDiff":null,"initialDiffFrom":"0.7.1","initialDiffTo":"0.7.2","summary":"The plugin confirms it reads a single note file from your vault by path so it can export that content. It also launches an external command with `child_process.execFile()` to run its Pandoc/Docker-based export toolchain, so it can send the note data to that local process during export. No specific network endpoint was identified in the available code summary; any network access would come from the external tooling it starts, if that tooling is configured to use the network.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expans

Nope