{ FetchedDataAndHeaders } from \"../model/DataStore\";\r\n import { isFetchedDataAndHeaders } from \"../util/TypeGuards\";\r\n import { isApiStatus } from \"../util/TypeGuards\";\r\n","securityAnnotations":[]},{"path":"src/ui/view/RightPaneView.ts","hunks":"@@ -63,6 +63,7 @@ export class RescueTimeRightPaneView extends ItemView {\n doughnutTitle.setText(\"\")\r\n barHourlyTitle.setText(\"\")\r\n barCategoryTitle.setText(\"\")\r\n+ score.setText(\"\")\r\n }\r\n \r\n const dataService = new DataService(this._plugin);\r\n","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":5}},"initialDiffFrom":"0.2.7","initialDiffTo":"0.2.8","summary":"The plugin retrieves your RescueTime activity data by making requests to external servers configured in its settings. It can fetch data from URL addresses provided through plugin configuration, giving users control over the endpoint but requiring trust in that destination. No local Vault APIs are accessed, and network requests are sent in plaintext without obfuscation. Data access is limited to external RescueTime sources with no confirmed forwarding or local processing beyond display.","dependencyVulnerabilities":[{"packageName":"@babel/runtime","packageVersion":"<7.26.10","severity":"moderate","title":"Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups","advisoryUrl":"https://github.com/advisories/GHSA-968p-4wvh-cqc8","ghsaId":"GHSA-968p-4wvh-cqc8","cveId":null,"vulnerableRange":"<7.26.10","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"braces","packageVersion":"<3.0.3","severity":"high","title":"Uncontrolled resource consumption in braces","advisoryUrl":"https://github.com/advisories/GHSA-grv7-fg5c-xmjg","ghsaId":"GHSA-grv7-fg5c-xmjg","cveId":null,"vulnerableRange":"<3.0.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"cross-spawn","packageVersion":">=7.0.0 <7.0.5","severity":"high","title":"Regular Expression Denial of Service (ReDoS) in cross-spawn","advisoryUrl":"https://github.com/advisories/GHSA-3xgq-45jj-v275","ghsaId":"GHSA-3xgq-45jj-v275","cveId":null,"vulnerableRange":">=7.0.0 <7.0.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"micromatch","packageVersion":"<4.0.8","severity":"moderate","title":"Regular Expression Denial of Service (ReDoS) in micromatch","advisoryUrl":"https://github.com/advisories/GHSA-952p-6rrq-rcjv","ghsaId":"GHSA-952p-6rrq-rcjv","cveId":null,"vulnerableRange":"<4.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https://github.com/advisories/GHSA-3v7f-55p6-f55p","ghsaId":"GHSA-3v7f-55p6-f55p","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"high","title":"Picomatch has a ReDoS vulnerability via extglob quantifiers","advisoryUrl":"https://github.com/advisories/GHSA-c2c7-rcm5-vvqj","ghsaId":"GHSA-c2c7-rcm5-vvqj","cveId":null,"vulnerableRange":"<2.3.2","fixAvaila