ergenceSummary":null,"activityTier":"active"},"versions":[{"id":119858,"version":"0.2.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-20T03:59:10.000Z","releaseDate":"2026-06-05T23:04:09.000Z","artifactStatus":"verified"}],"findings":[{"id":1174224,"pluginId":"simple-progress-bar","version":"0.2.0","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":62,"codeSnippet":"this.app.workspace.getActiveViewOfType","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/pochihh/obsidian-simple-progress-bar/blob/refs/tags/0.2.0/main.ts#L62"},{"id":1174225,"pluginId":"simple-progress-bar","version":"0.2.0","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":87,"codeSnippet":"this.app.vault.on","explanation":"Accesses Obsidian API: app.vault","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/pochihh/obsidian-simple-progress-bar/blob/refs/tags/0.2.0/main.ts#L87"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"","initialDiffTo":"0.2.0","summary":"This plugin is designed to show progress bars based on checkbox completion inside Obsidian. In the provided review, it does not use Obsidian Vault APIs and no network activity was observed, so there is no confirmed evidence that it reads from or sends vault data to any external service. Based on the available information, its behavior appears limited to local UI display changes.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":">=0.27.3 <0.28.1","severity":"low","title":"esbuild allows arbitrary file read when running the development server on Windows","advisoryUrl":"https://github.com/advisories/GHSA-g7r4-m6w7-qqqr","ghsaId":"GHSA-g7r4-m6w7-qqqr","cveId":null,"vulnerableRange":">=0.27.3 <0.28.1","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <=4.1.1","severity":"moderate","title":"JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases","advisoryUrl":"https://github.com/advisories/GHSA-h67p-54hq-rp68","ghsaId":"GHSA-h67p-54hq-rp68","cveId":null,"vulnerableRange":">=4.0.0 <=4.1.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.3.0","severity":"high","title":"js-yaml: YAML merge-key chains can force quadratic CPU consumption","advisoryUrl":"https://github.com/advisories/GHSA-52cp-r559-cp3m","ghsaId":"GHSA-52cp-r559-cp3m","cveId":null,"vulnerableRange":">=4.0.0 <4.3.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":7,"directDeps":0,"transitiveDeps":0}}]]}]

Simple Progress Bar