1.0.2

Addresses the remaining findings from the Community directory's automated review. No behaviour changes.

Supply chain

• Build provenance attestations are now issued for main.js and styles.css. You can verify the assets below were built from this repository by its release workflow:

  gh attestation verify main.js --repo VaalRL/obsidian-note-wormhole

• package-lock.json is committed and both workflows use npm ci, so the build is reproducible byte-for-byte.

Fixed

• display: contents removed from styles.css — flagged as only partially supported, and historically it drops elements from the accessibility tree. The affected wrappers are gone entirely.
• The fs import is narrowed to { statSync }, making it plain that the only filesystem operation is a read-only existence check and that nothing is ever written.

Requires cloudflared

Note Wormhole runs Cloudflare's cloudflared; it never downloads or installs it.

• Windows: winget install Cloudflare.cloudflared
• macOS: brew install cloudflared
• Linux: Cloudflare's package repository

Installing manually

Download main.js, manifest.json and styles.css below into <your vault>/.obsidian/plugins/note-wormhole/, then reload Obsidian and enable the plugin.

Requires Obsidian 1.5.1 or newer, desktop only.

1.0.1

Addresses the findings from the Community directory's automated review.

Fixed

• minAppVersion raised to 1.5.1. workspace.getLeafById is @since 1.5.1; the manifest declared 1.5.0. If you are on 1.5.0, update Obsidian before installing.
• Type safety. skipLibCheck moved into tsconfig.json so tooling that reads the project sees it, "types": ["node"] declared explicitly, and lib/target raised to ES2018. Linting is now type-aware, which caught loadData() being spread into settings as any — disabling type checking wherever settings were read.
• Pop-out window compatibility. Timers are scoped to window.
• Error handling. A failed local server now rejects with an Error, and a cloudflared exit on a signal no longer reports "code null".
• One build dependency removed. builtin-modules replaced with node:module's builtinModules.

No behaviour changes. Sharing, the tunnel, anti-copy mode and the viewer count all work as in 1.0.0.

Requires cloudflared

Note Wormhole runs Cloudflare's cloudflared; it never downloads or installs it.

• Windows: winget install Cloudflare.cloudflared
• macOS: brew install cloudflared
• Linux: Cloudflare's package repository

Installing manually

Download main.js, manifest.json and styles.css below into <your vault>/.obsidian/plugins/note-wormhole/, then reload Obsidian and enable the plugin.

Requires Obsidian 1.5.1 or newer, desktop only.

1.0.0

First public release.

Share a note from your vault through a temporary Cloudflare quick tunnel. The note is rendered into memory and served from your own machine — nothing is uploaded, and closing the tab, stopping the session or quitting Obsidian kills the link immediately.

Requires cloudflared installed on your machine. Note Wormhole runs it; it never downloads or installs it. The settings tab shows whether it was found and how to install it if not.

• Windows: winget install Cloudflare.cloudflared
• macOS: brew install cloudflared
• Linux: Cloudflare's package repository

Installing manually

Download main.js, manifest.json and styles.css below into <your vault>/.obsidian/plugins/note-wormhole/, then reload Obsidian and enable the plugin.

Requires Obsidian 1.5.0 or newer, desktop only.