66 | \t\t\t\tconst res = await requestUrl({ url });\n 67 | \t\t\t\tawait this.app.vault.adapter.writeBinary(dictPath, res.arrayBuffer);\n 68 | \t\t\t\tnew Notice(`Download complete!`);\n 69 | \t\t\t} catch(err) {","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"hardcoded-url"}],"initialDiff":{"pluginId":"zhongwen-reader","fromVersion":"1.1.3","toVersion":"1.1.4","files":[{"path":"main.ts","hunks":"@@ -72,6 +72,22 @@ export default class ZhongwenReaderPlugin extends Plugin {\n \t\t\t}\n \t\t}\n \n+\t\t// Download HSK Vocab json if needed\n+\t\tconst hskPath = pluginFolder + '/hsk-vocab.json';\n+\t\tconst hskExists = await this.app.vault.adapter.exists(hskPath);\n+\t\tif (!hskExists) {\n+\t\t\tnew Notice(\"Downloading HSK vocab...\");\n+\t\t\ttry {\n+\t\t\t\tconst hskUrl = 'https://raw.githubusercontent.com/natipt/obsidian-zhongwen-reader/main/hsk-vocab.json';\n+\t\t\t\tconst hskRes = await requestUrl({ url: hskUrl });\n+\t\t\t\tawait this.app.vault.adapter.write(hskPath, hskRes.text);\n+\t\t\t\tnew Notice('HSK vocab download complete!');\n+\t\t\t} catch (err) {\n+\t\t\t\tconsole.error(\"Failed to download hsk-vocab.json.\");\n+\t\t\t\tnew Notice('Failed to download HSK vocab.');\n+\t\t\t}\n+\t\t}\n+\n \t\t// Create vocab.json if needed\n \t\tconst vocabPath = pluginFolder + '/vocab.json';\n \t\tconst vocabExists = await this.app.vault.adapter.exists(vocabPath);\n","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":1}},"initialDiffFrom":"1.1.3","initialDiffTo":"1.1.4","summary":"The plugin reads a vocabulary data file from its configuration directory and downloads a CEDICT dictionary file from GitHub on demand, storing both locally within your vault. Network activity is limited to fetching the dictionary from GitHub; the plugin does not send user vault data to external services. All data is stored unencrypted in your local vault and plugin configuration directory, with no obfuscation applied.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryUrl":"https://github.com/advisories/GHSA-mh29-5h37-fv8m","ghsaId":"GHSA-mh29-5h37-fv8m","cveId":null,"vulnerableRa

Zhongwen Reader