Manifest
    by Manifold
    Back to Results
    0.124.77

    nightly

    This is a prerelease version of Dendron that may be unstable. Please install the main dendron extension instead.

    Other
    Rank#606
    Publisher dendronRegistry openvsx197,709Last scanned Sep 14, 2026, 12:14 PMRegistryHomepageGitHub
    Created
    6 years ago
    Last commit
    last year

    Security Findings

    9

    Recently created account

    SuspiciousLineage

    Account was 24d old when repo was created

    Package registry name mismatch

    SuspiciousLineage

    npm name 'root' != repo 'dendron'

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: use s...****

    dist/static/js/index.bundle.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: use s...****

    dist/extension.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: use s...****

    dist/server.js

    OWASP-AST04

    Sensitive file access3×

    SuspiciousScanner

    Access to sensitive file: homedir():e;return c.default.join(n,i.CONSTANTS.DENDRON_LOCAL_CONFIG_FILE)}static getRaw(e,t){const n=h.configPath(e);re...

    Access to sensitive file: homedir(),i.FOLDERS.DENDRON_SYSTEM_ROOT,"meta.json")}deleteMeta(e){const t=this.getMeta();delete t[e],a.default.writeJSO...

    Access to sensitive file: homedir(),r.FOLDERS.DENDRON_SYSTEM_ROOT,r.FOLDERS.SAVED_TELEMETRY);await c().ensureDir(a),await c().writeFile(p().join(a...

    OWASP-AST03

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/releasepages.yml] curl -X POST -H "Content-Type: text/plain" -H "X-Releasepages-Secret: ${SECRET_KEY}"