I love that under disclosures "Plugin might make requests to 1 external domain", if you click on it, it shows the domain: "github.com". great work!
Example from https://community.obsidian.md/plugins/zotlit
I'd say that may be as harmful as it is helpful. Amateur users may have heard of Github and would therefore trust that domain, but you can upload malware to Github just as easily as anything else.
Which is brilliant...... Especially if we remember how easy is to host a (malicious) script on github :)
But yes, great work indeed. It finally makes me want to move over to Obsidian.