0Z","artifactStatus":"verified"},{"id":117499,"version":"1.1.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-18T22:44:30.000Z","releaseDate":"2026-06-25T20:31:56.000Z","artifactStatus":null},{"id":117498,"version":"1.1.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-18T22:44:19.000Z","releaseDate":"2026-06-24T22:06:04.000Z","artifactStatus":null},{"id":117497,"version":"1.0.3","score":100,"privacyLevel":0,"analyzedAt":"2026-08-18T22:44:09.000Z","releaseDate":"2026-06-24T21:28:38.000Z","artifactStatus":null},{"id":117496,"version":"1.0.2","score":100,"privacyLevel":0,"analyzedAt":"2026-08-18T22:43:58.000Z","releaseDate":"2026-06-24T21:15:58.000Z","artifactStatus":null},{"id":117495,"version":"1.0.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-18T22:43:45.000Z","releaseDate":"2026-06-24T21:02:39.000Z","artifactStatus":null},{"id":117494,"version":"1.0.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-18T22:43:34.000Z","releaseDate":"2026-06-24T20:38:56.000Z","artifactStatus":null}],"findings":[{"id":1161565,"pluginId":"pretext-justify","version":"1.1.2","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":62,"codeSnippet":"this.app.workspace.on","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/tyblhqy/obsidian-pretext/blob/refs/tags/1.1.2/src/main.ts#L62"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"1.1.1","initialDiffTo":"1.1.2","summary":"Pretext Justify is a local formatting plugin that adjusts text justification in Obsidian’s reading view. In the reviewed build, it does not use Obsidian vault APIs, so there is no confirmed file-level data access through Obsidian’s data layer, and no network activity was observed. It does not send data to any endpoint in this version; only if future code were added could it send data to a server.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.1","source":"npm-audit","isDirect":true,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.3.0","severity":"high","title":"js-yaml: YAML merge-key chains can force quadratic CPU consumption","advisoryUrl":"https://github.com/advisories/GHSA-52cp-r559-cp3m","ghsaId":"GHSA-52cp-r559-cp3m","cveId":null,"vulnerableRange":">=4.0.0 <4.3.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":8,"directDeps":1,"transitiveDeps":0}}]]}]