rified","artifactUnavailableReason":null,"artifactDivergenceSummary":null,"activityTier":"active"},"versions":[{"id":122579,"version":"1.0.4","score":100,"privacyLevel":0,"analyzedAt":"2026-08-21T13:25:57.000Z","releaseDate":"2026-07-10T18:31:33.000Z","artifactStatus":"verified"},{"id":122578,"version":"1.0.3","score":100,"privacyLevel":0,"analyzedAt":"2026-08-21T13:25:44.000Z","releaseDate":"2026-05-27T18:59:18.000Z","artifactStatus":null},{"id":122577,"version":"1.0.2","score":100,"privacyLevel":0,"analyzedAt":"2026-08-21T13:25:32.000Z","releaseDate":"2026-05-15T20:02:10.000Z","artifactStatus":null},{"id":122576,"version":"1.0.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-21T13:25:20.000Z","releaseDate":"2026-05-15T18:47:59.000Z","artifactStatus":null},{"id":122575,"version":"1.0.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-21T13:25:07.000Z","releaseDate":"2026-05-15T18:23:27.000Z","artifactStatus":null}],"findings":[{"id":1192064,"pluginId":"todo-done-mover","version":"1.0.4","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":50,"codeSnippet":"this.app.workspace.on","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/donnervs/obsidian-todo-done-mover/blob/refs/tags/1.0.4/main.ts#L50"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"1.0.3","initialDiffTo":"1.0.4","summary":"This plugin is confirmed to move completed checkbox tasks, including their nested sub-tasks, into a Done section in the note when you use the context menu, a command, or automatic mode. It does not use Obsidian Vault APIs and no network activity was observed, so it is not confirmed to read or send vault data outside the app. If automatic mode is enabled, it can perform the same local note reorganization without further user action.","dependencyVulnerabilities":[{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.1","source":"npm-audit","isDirect":true,"path":null},{"packageName":"postcss","packageVersion":"<=8.5.17","severity":"high","title":"PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure","advisoryUrl":"https://github.com/advisories/GHSA-r28c-9q8g-f849","ghsaId":"GHSA-r28c-9q8g-f849","cveId":null,"vulnerableRange":"<=8.5.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"postcss","packageVersion":"<=8.5.22","severity":"moderate","title":"PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset","advisoryUrl":"https://github.com/advisories/GHSA-fxqj-rqcc-2cmp","ghsaId":"GHSA-fxqj-rqcc-2cmp","cveId":null,"vulnerableRange":"<=8.5.22","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"vite","packageVersion":"<=6.4.1","severity":"moderate","title":"Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling","advisoryUrl":"https://github.com/advisories/GHSA-4w7w-66w2-5vf9","ghsaId":"GHSA-4w7w-66w2-5vf9","cveId":null,"vulnerableRange":"<=6.4.1","fixAvailable":"4.1.10","source":"npm-audit","isDirect":false,"path":"vite-node > vite, vitest > vite"},{"packageName":"vite","packageVersion":"<=6.4.2","severity":"moderate","title":"launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows","advisoryUrl":"https://github.com/advisories/GHSA-v6wh-96g9-6wx3","ghsaId":"GHSA-v6wh-96g9-6wx3","cveId":null,"vulnerableRange":"<=6.4.2","fixAvailable":"4.1.10","source":"npm-audit","isDirect":false,"path":"vite-node > vite, vitest > vite"},{"packageName":"vite","packageVersion":"<=6.4.2","severity":"high","title":"vite: `server.fs.deny` bypass on Windows alternate paths","advisoryUrl":"https://gith

To-Do to Done Mover