ttps://timor.tech/api/holiday/year/${year}/`;\n> 68 | \t\tconst resp = await requestUrl({\n 69 | \t\t\turl,\n 70 | \t\t\tmethod: 'GET',\n 71 | \t\t\theaders: { 'Accept': 'application/json' },","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"},{"host":"wttr.in","url":"https://wttr.in/${config.latitude},${config.longitude}?format=j1","filePath":"src/services/weather.ts","lineNumber":283,"codeSnippet":" 280 | async function fetchFromWttr(config: WeatherConfig): Promise {\n 281 | \tconst url = `https://wttr.in/${config.latitude},${config.longitude}?format=j1`;\n 282 | \n> 283 | \tconst resp = await requestUrl({ url });\n 284 | \tconst json = resp.json as WttrResponse;\n 285 | \n 286 | \tconst current = json.current_condition?.[0];","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"}],"initialDiff":null,"initialDiffFrom":"","initialDiffTo":"1.0.0","summary":"O-Dashboard reads one vault file by path and also has access to all files in your vault, so it can inspect note content across the vault when needed. On the network side, it sends requests to `book.douban.com` and Open-Meteo’s geocoding API, and it can also retrieve data from endpoints you configure in the plugin.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":">=3.0.0 <3.1.5","severity":"high","title":"fast-uri vulnerable to host confusion via backslash authority introducer","advisoryUrl":"https://github.com/advisories/GHSA-7p8r-x3mc-p8w7","ghsaId":"GHSA-7p8r-x3mc-p8w7","cveId":null,"vulnerableRange":">=3.0.0 <3.1.5","fixAvailable":null,"sourc