ractFileByPath(path);\n 295 | \n 296 | \t\tif (file instanceof TFile && file.extension === ''md'') {\n 297 | \t\t\tconst isLocked = this.settings.lockedNotes.has(path);","explanation":"Looks up a file in the vault and checks whether it is marked as locked","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/Felvesthe/Note-Locker/blob/1.3.1/src/main.ts#L294"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"note-locker","fromVersion":"1.3.0","toVersion":"1.3.1","files":[{"path":"src/main.ts","hunks":"$21","securityAnnotations":[]},{"path":"src/models/types.ts","hunks":"@@ -7,6 +7,7 @@ export interface NoteLockerSettings {\n \tshowFileExplorerIcons: boolean;\n \tshowStatusBarButton: boolean;\n \tshowNotifications: boolean;\n+\tpreventEditInLockedNotes: boolean;\n }\n \n export const DEFAULT_SETTINGS: NoteLockerSettings = {\n@@ -17,5 +18,6 @@ export const DEFAULT_SETTINGS: NoteLockerSettings = {\n \tdesktopNotificationMaxLength: 22,\n \tshowFileExplorerIcons: true,\n \tshowStatusBarButton: true,\n-\tshowNotifications: true\n+\tshowNotifications: true,\n+\tpreventEditInLockedNotes: false\n };\n","securityAnnotations":[]},{"path":"src/settings.ts","hunks":"$22","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"1.3.0","initialDiffTo":"1.3.1","summary":"The note-locker plugin reads lock metadata from your vault to control how notes open, defaulting locked notes to preview mode instead of edit mode. All operations are local to your vault with no network communication or data exfiltration. The plugin accesses only the lock status information it needs, with no obfuscation indicating straightforward behavior.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryU

Note Locker