dsh-dep-vuln-scan
Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.
122 results
Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.
DSH plugin that replaces the official Models settings page: provider management, per-model reasoning effort, retry overrides, drag reorder, credential status, upstream model sync, and fixed model deletion
Fix DSH Desktop copy buttons by bridging clipboard writes to the Electron main process.
可转债 / 债券 本地优先分析引擎(转股价值/溢价率/纯债价值/YTM/久期/双低/下修·强赎·回售触发判定)
DeepSeek Harness plugin: fingerprint the provider, model id, sampling, offered tool schemas, and system-prompt prefix of each request, and diff the live card against a pinned one through the modelprint_check tool
DeepSeek Harness plugin that explains which layer killed a failed turn and how to fix it
DeepSeek Harness (dsh) Windows 环境防坑插件:两个防坑 skill(windows-enc/windows-sys:编码/转义/路径/进程/乱码预防规则)+ 三层主动防护(pwsh 结果乱码检测提示、危险写命令拦截、windows_encode_detect/fix 编码诊断修复工具)。零运行时依赖,零构建。
Input assistant for DeepSeek Harness Web UI: inline AI completion (FIM ghost suggestion, Tab to accept) and Chinese-friendly typo checking with click-to-fix.
Touch-device comfort fixes for the dsh web client: suppress tap-synthesized tooltip ghosts and remove double-tap-zoom ambiguity from controls.
Mobile/touch optimizations for the DSH Web GUI: iOS input-zoom fix, safe-area insets, touch targets, and viewport clamps for stock dialogs on narrow screens.
修复 sandbox_permissions 和 justification 字段在 pwsh/bash/fs/dsh-sandbox 中的 no-op 升级报错。当会话已是 danger-full-access 模式时,模型携带空 justification 或重申同一模式被拒的问题。
Fixed five-member dev team for DeepSeek Harness driven by the spec-superflow state machine: captain + spec-writer/architect/engineer/reviewer/docs, phase-tagged tasks with dependencies, auto phase advancement with a human build gate, and a workflow stepper in the web GUI
Manchester United 2026/27 fixtures in the dsh web sidebar, kickoff times in your local timezone, finished matches with W/L/D results.
DeepSeek Harness plugin: capture the provider model fingerprint (system_fingerprint) of every LLM call and show it as a hover-revealed plain-text suffix on each assistant message's metrics row in the Web UI.
固定新会话默认模型与 Agent 预设模式,并支持按工作区独立绑定
Fix the DeepSeek Harness Web GUI over plain HTTP on a LAN: injects a crypto.randomUUID polyfill (getRandomValues-backed) before dsh bundle code runs. No official source changes needed.
水电小修
DSH/Cordis host plugin: grant /dev/dxg (+ /proc) to the Landlock sandbox so CUDA works in WSL2
Fix DSH's "reveal in file manager" on Windows: Explorer opened at Desktop, and windowsHide:true created the window hidden (SW_HIDE).
DeepSeek Harness plugin: transcodes images to a base64-safe format (PNG) before a vision request, fixing gateways like LM Studio that reject non-PNG/JPEG/GIF data URLs with "'url' field must be a base64 encoded image."
EN: Selectable neo-brutalist/pop-art themes for DeepSeek Harness Web with calm reading surfaces. 0.5.10 fixes the queued-message banner and the composer attachment button in every variant. ZH: 面向 DeepSeek Harness Web、兼顾安静阅读表面的新粗野主义与波普艺术主题。0.5.10 修复全部变体的排队消息面板与输入框附件按钮。
Fixes malformed tool-call arguments (nested {"arguments":{…}} wrappers, wrapper-key aliases, param-key aliases) at the llm/stream seam — repairs execution, persistence and history replay in one place. 修复模型产出的畸形工具参数。
Keep DSH tool results cache-prefix safe: truncate a result before it first enters the session surface, and never rewrite a tool result a provider request has already delivered.
Fix DSH web_search through OpenCode Go / Zen: auto-inject x-opencode-session. Drop-in patched fork of @deepseek-ai/dsh-web-search-deepseek (DeepSeek Harness).