rvice } from \"../api/DataService\";\r\n import { FetchedDataAndHeaders } from \"../model/DataStore\";\r\n import { isFetchedDataAndHeaders } from \"../util/TypeGuards\";\r\n import { isApiStatus } from \"../util/TypeGuards\";\r\n","securityAnnotations":[]},{"path":"src/ui/view/RightPaneView.ts","hunks":"@@ -63,6 +63,7 @@ export class RescueTimeRightPaneView extends ItemView {\n doughnutTitle.setText(\"\")\r\n barHourlyTitle.setText(\"\")\r\n barCategoryTitle.setText(\"\")\r\n+ score.setText(\"\")\r\n }\r\n \r\n const dataService = new DataService(this._plugin);\r\n","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":5}},"initialDiffFrom":"0.2.7","initialDiffTo":"0.2.8","summary":"The rescuetime plugin fetches your time-tracking data from RescueTime's external API via HTTP requests and displays it within Obsidian, requiring authentication credentials to access your account. It does not read or modify any local vault files, relying entirely on network calls to retrieve your productivity metrics from RescueTime servers. No code obfuscation is present, making the network behavior transparent to inspection.","dependencyVulnerabilities":[{"packageName":"@babel/runtime","packageVersion":"<7.26.10","severity":"moderate","title":"Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups","advisoryUrl":"https://github.com/advisories/GHSA-968p-4wvh-cqc8","ghsaId":"GHSA-968p-4wvh-cqc8","cveId":null,"vulnerableRange":"<7.26.10","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"braces","packageVersion":"<3.0.3","severity":"high","title":"Uncontrolled resource consumption in braces","advisoryUrl":"https://github.com/advisories/GHSA-grv7-fg5c-xmjg","ghsaId":"GHSA-grv7-fg5c-xmjg","cveId":null,"vulnerableRange":"<3.0.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"cross-spawn","packageVersion":">=7.0.0 <7.0.5","severity":"high","title":"Regular Expression Denial of Service (ReDoS) in cross-spawn","advisoryUrl":"https://github.com/advisories/GHSA-3xgq-45jj-v275","ghsaId":"GHSA-3xgq-45jj-v275","cveId":null,"vulnerableRange":">=7.0.0 <7.0.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"micromatch","packageVersion":"<4.0.8","severity":"moderate","title":"Regular Expression Denial of Service (ReDoS) in micromatch","advisoryUrl":"https://github.com/advisories/GHSA-952p-6rrq-rcjv","ghsaId":"GHSA-952p-6rrq-rcjv","cveId":null,"vulnerableRange":"<4.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https://github.com/advisories/GHSA-3v7f-55p6-f55p","ghsaId":"GHSA-3v7f-55p6-f55p","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.2","severity":"high","title":"Picomatch has a ReDoS vulnerability via extglob quantifiers","advisoryUrl":"https://github.com/advisories/GHSA-c2c7-rcm5-vvqj","ghsaId":"GHSA-c2c7-rcm5-vvqj","cveId":null,"vulnerableRange":"<2.3.2","fixAvailable":null,"so