"artifactUnavailableReason":null,"artifactDivergenceSummary":null,"activityTier":"active"},"versions":[{"id":117677,"version":"1.0.2","score":100,"privacyLevel":0,"analyzedAt":"2026-08-19T00:49:11.000Z","releaseDate":"2026-07-25T17:23:25.000Z","artifactStatus":"verified"},{"id":117676,"version":"1.0.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-19T00:49:00.000Z","releaseDate":"2026-07-13T23:18:56.000Z","artifactStatus":null},{"id":117675,"version":"1.0.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-19T00:48:49.000Z","releaseDate":"2026-07-13T20:37:34.000Z","artifactStatus":null}],"findings":[{"id":1162525,"pluginId":"prose-lens","version":"1.0.2","category":"filesystem_access","severity":"high","filePath":"src/license/LicenseManager.ts","lineNumber":5,"codeSnippet":"\"../shared/verifyLicense.mjs\"","explanation":"Filesystem access with path traversal pattern detected: \"../shared/verifyLicense.mjs\". This plugin constructs paths that navigate outside its expected directory.","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/israerusan/prose-lens/blob/refs/tags/1.0.2/src/license/LicenseManager.ts#L5"},{"id":1162526,"pluginId":"prose-lens","version":"1.0.2","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":57,"codeSnippet":"this.app.workspace.on","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/israerusan/prose-lens/blob/refs/tags/1.0.2/src/main.ts#L57"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"1.0.1","initialDiffTo":"1.0.2","summary":"Prose Lens reads the text currently open in the editor to flag passive voice, adverbs, hedges, long sentences, and a Flesch reading grade, and it does this locally in Obsidian. It does not use Obsidian vault APIs, and no network activity was observed, so it does not send data to any external service. Based on the available information, its behavior is limited to on-device analysis for live readability and style feedback.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"pa