leReason":null,"artifactDivergenceSummary":null,"activityTier":"active"},"versions":[{"id":115704,"version":"1.0.3","score":100,"privacyLevel":0,"analyzedAt":"2026-08-18T01:12:19.000Z","releaseDate":"2026-06-08T11:12:19.000Z","artifactStatus":"verified"},{"id":115703,"version":"1.0.2","score":100,"privacyLevel":0,"analyzedAt":"2026-08-18T01:12:08.000Z","releaseDate":"2026-06-08T09:54:59.000Z","artifactStatus":null},{"id":115702,"version":"1.0.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-18T01:11:57.000Z","releaseDate":"2026-06-08T09:38:30.000Z","artifactStatus":null}],"findings":[{"id":1149800,"pluginId":"obsid-link","version":"1.0.3","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":33,"codeSnippet":"this.app.workspace.getActiveFile","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/lgreil/obsid-link/blob/refs/tags/1.0.3/main.ts#L33"},{"id":1149801,"pluginId":"obsid-link","version":"1.0.3","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":85,"codeSnippet":"this.app.vault.getName","explanation":"Accesses Obsidian API: app.vault","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/lgreil/obsid-link/blob/refs/tags/1.0.3/main.ts#L85"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"1.0.2","initialDiffTo":"1.0.3","summary":"This plugin uses the current note’s Obsidian deep link information to build a shareable `obsid.net` HTTPS URL, and it can copy that link or open it when you trigger the command. It does not use Obsidian vault APIs, so based on the reviewed behavior it is not directly reading or modifying vault contents beyond the current note link it needs to generate the URL. No network activity was observed in the plugin itself; if you choose to open the link, your browser can send a request to `obsid.net`.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arra

Microsoft-Compatible Link