:"https://github.com/mrcnkobu/tascal/blob/refs/tags/1.0.5/migration.ts#L54"}],"factors":null,"networkEndpoints":[{"host":"","url":null,"filePath":"main.ts","lineNumber":165,"codeSnippet":" 162 | \t\t\t const calendarResults = await Promise.all(\n 163 | \t\t\t\tthis.settings.calendars.map(async (cal) => {\n 164 | \t\t\t\t try {\n> 165 | \t\t\t\t\tconst res = await requestUrl({ url: cal.url });\n 166 | \t\t\t\t\tconst comp = ICAL.Component.fromString(res.text);\n 167 | \t\t\t\t\tconst events = extractEventsForDate(comp, localDate, this.settings.timezone);\n 168 | \t\t\t\t\treturn { ok: true as const, cal, events };","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"}],"initialDiff":null,"initialDiffFrom":"1.0.4","initialDiffTo":"1.0.5","summary":"Tascal reads one vault file and all markdown files in your vault to power its calendar, timeline, and time-tracking features. It also retrieves data from a configured endpoint, so if you set one up, it can send data to that endpoint as part of the network request and use the response it gets back. The available details do not show it contacting any other network service.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.1","source":"npm-audit","isDirect":true,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":9,"directDeps":2,"transitiveDeps":0}}]]}]