@secupriv Interesting, I had a conversation just yesterday about how to sensibly scan the plugins in an #Obsidian vault. Even the official ones come without a package.json (which could be tampered anyway). Are we back to scanning every file on opening, or is there something more efficient for plain javascript snippets?