"https://github.com/chrisgrieser/obsidian-quadro/blob/1.28.2/src/extraction/create-new-extraction-type.ts#L79"},{"id":895513,"pluginId":"quadro","version":"1.28.2","category":"permissions_scope","severity":"info","filePath":"src/extraction/extractiontypes-overview.ts","lineNumber":37,"codeSnippet":"app.internalPlugins.plugins","explanation":"Accesses Obsidian API: app.internalPlugins","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/chrisgrieser/obsidian-quadro/blob/1.28.2/src/extraction/extractiontypes-overview.ts#L37"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"quadro","fromVersion":"1.28.1","toVersion":"1.28.2","files":[{"path":"src/auxiliary/theoretical-saturation.ts","hunks":"@@ -46,13 +46,15 @@ export async function saturationForExtraction(plugin: Quadro): Promise {\n \t\tconst newE = extractions.new ?? 0;\n \t\tconst addedE = extractions[\"added paragraph\"] ?? 0;\n \t\tconst mergeE = extractions.merge ?? 0;\n-\t\tif (newE + addedE + mergeE === 0) continue; // avoid division by zero ( no extractions anyway )\n-\t\tconst ratio = newE / (addedE + newE + mergeE);\n+\t\tconst deleteE = extractions.delete ?? 0;\n+\t\tif (newE + addedE + mergeE + deleteE === 0) continue; // avoid division by zero ( no extractions anyway )\n+\t\tconst ratio = newE / (newE + addedE + mergeE + deleteE);\n \n \t\textractionActionByDay.push({\n \t\t\tnewExtractions: newE,\n \t\t\taddedToExtractions: addedE,\n \t\t\tmergeExtractions: mergeE,\n+\t\t\tdeletedExtractions: deleteE,\n \t\t\tratio: ratio,\n \t\t});\n \t}\n","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"1.28.1","initialDiffTo":"1.28.2","summary":"Quadro reads metadata properties from all markdown files in your vault to organize qualitative research data, and accesses a local progress-tracking file to manage your research sessions. All data storage is local in Markdown format with no network connectivity or external data transmission. The plugin's scope is limited to vault contents with no obfuscation, making its file access fully transparent.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.0.3","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":">=2.0.0 <2.0.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https://github.com/advisories/GHSA-3v7f-55p6-f55p","ghsaId":"GHSA-3v7f-55p6-f55p","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":">=4.0.0 <4.0.4","severity":"mode