Skip to content

1.0.3

Choose a tag to compare

@notoriouslab notoriouslab released this 21 May 09:35
· 189 commits to main since this release

Audit compliance patch

Addresses three findings raised by the Obsidian Developer Dashboard auto-audit on v1.0.2.

Changed

  • Build: esbuild now strips require("node:fs") and require("node:crypto") from the bundled sql.js Emscripten output. Those branches are dead code in Obsidian's renderer process (gated by process.type !== "renderer"); removing the syntactic references resolves the Dashboard's "Direct Filesystem Access" warning without changing runtime behaviour.

Docs

  • README + README.zh-TW: added an Audit disclosures section explaining the remaining audit recommendations — vault enumeration (necessary for indexing; user-scopable via excludePatterns), and new Function inside bundled @huggingface/transformers (library internals only; Vault Curate's own source contains zero eval / new Function).