Third-party Sync
This plugin has not been manually reviewed by Obsidian staff. Security and feature updates for the remotely-save unofficial plugin allowing users to synchronize notes between local device and the cloud service. Not backwards compatible.
The above warnings are based on limited information and might not always be accurate.
Data
| ID | third-party-sync |
| Author | nightfall |
| Minimum Obsidian Version | 1.11.0 |
| Official Release Date | 2026-06-14 |
| Last update | 2026-06-14 |
Last Refresh
Obsidian Stats last refreshed the data behind this page on Jun 15, 2026.
| Community plugin snapshot | Jun 15, 2026 |
| Repository clone | last successful checkout Jun 15, 2026 |
| Release acquisition | release metadata checked Jun 15, 2026; latest main.js acquired |
Quick Links
Changes
| Date | Changed Property | Old Value | New Value |
|---|---|---|---|
| 2026-06-14 | Plugin Added |
Repository Data
| License | Apache-2.0 in package.json Apache-2.0 in LICENSE
file
|
| Package Manager | npm |
| Uses Typescript | Yes |
| Installed Bundlers | esbuild |
| Installed Testing Frameworks | None found |
| Has Test Files | No |
Latest Release main.js Size
| 986 KB |
| Detected ES Version | ES2018 |
| Probably Minified | Yes |
| main.js API Findings | 9 disclosures |
| Uses BRAT beta releases | No |
| Dependencies | @aws-sdk/client-s3, @aws-sdk/fetch-http-handler, @aws-sdk/lib-storage, @aws-sdk/protocol-http, @aws-sdk/querystring-builder, @aws-sdk/types, @fyears/tsqueue, @microsoft/microsoft-graph-client, aggregate-error, assert, buffer, emoji-regex-xs, fast-equals, http-status-codes, localforage, loglevel, mime-types, mustache, nanoid, obsidian, p-queue, pako, path-browserify, rfc4648, stream-browserify, url, util, webdav, xregexp |
| Dev Dependencies | @microsoft/microsoft-graph-types, @types/lodash, @types/mime-types, @types/mustache, @types/node, @typescript-eslint/parser, crypto-browserify, esbuild, eslint, eslint-plugin-obsidianmd, prettier, typescript |
main.js API Findings
These conservative findings come from static analysis of the latest release main.js. The table includes warnings and high-confidence
informational findings; lower-confidence informational findings are omitted to reduce false positives. Warnings indicate usage of potentially risky
APIs, but such APIs can be used safely if handled with care.
| Disclosure | Detected From |
|---|---|
| Adapter File Access | Uses adapter-level vault filesystem APIs |
| Clipboard Access | Reads or writes clipboard data |
| Cors Free Network Access | Uses Obsidian request APIs |
| Dynamic Code Or Remote Code | Evaluates dynamic code or injects scripts |
| Full Vault Access | Enumerates vault files |
| Global Handlers Or Timers | Registers events, DOM handlers, or intervals |
| Network Access | Uses Obsidian request APIs, Uses browser network APIs |
| Private Network Access | References localhost or private-network addresses |
| Process Or Shell Access | Uses Node process or subprocess APIs |
| Finding | Type | Confidence | Evidence |
|---|---|---|---|
| Evaluates dynamic code or injects scripts | Warning | High | dynamic_code:function_constructor (1) |
| Uses Node process or subprocess APIs | Warning | High | process.env (6), process.platform (1) |
| References localhost or private-network addresses | Warning | Medium | localhost (8) |
| Reads or writes clipboard data | Info | High | navigator.clipboard.writeText (2) |
| Uses persistent browser storage | Info | High | localStorage.getItem (2), localStorage.setItem (2), localStorage (5) |
| Registers events, DOM handlers, or intervals | Info | High | setInterval (1), setTimeout (8), this.registerEvent (2), this.registerInterval (3) |
| References URLs or constructs URL objects | Info | High | http:// (12), https:// (84), URL (8), URLSearchParams (7) |
| Uses browser network APIs | Info | High | fetch (2) |
| Uses Obsidian request APIs | Info | High | obsidian.requestUrl (12) |
| Persists plugin settings or data | Info | High | this.loadData (1), this.saveData (1) |
| Registers plugin settings UI | Info | High | this.addSettingTab (1), Setting (18), obsidian.Setting (18) |
| Registers commands, ribbon icons, or status bar items | Info | High | this.addCommand (6), this.addRibbonIcon (1), this.addStatusBarItem (1) |
| Accesses attachment resource paths | Info | High | app.vault.adapter.getResourcePath (1) |
| Accesses Obsidian vault APIs | Info | High | app.vault (52) |
| Enumerates vault files | Info | High | app.vault.getAllLoadedFiles (2) |
| References Obsidian URI links | Info | High | obsidian:// (2) |
| Uses adapter-level vault filesystem APIs | Info | High | app.vault.adapter (9) |
| Accesses Obsidian workspace APIs | Info | High | app.workspace (4) |
The above data may not be accurate and contain errors. For more information refer to the page about data collection.
Lines of Code
The plugin has a total of 10344 lines of code. The following chart shows the lines of code split by programming language.
Downloads
The following chart shows the total number of downloads of the plugin over time. The second chart shows the delta of downloads per week, which is the number of new downloads per week. New version releases are marked with vertical lines.
Version History
| Version | Release Date | Note |
|---|---|---|
| 26.0.0 | 2026-06-14 | None |
| 26.0.1 | 2026-06-14 | None |
| 26.0.2 | 2026-06-14 | None |
| 26.0.4 | 2026-06-14 | None |