upstream-radar
Always-on dependency and compatibility monitoring for DeepSeek Harness plugins, including exact paths, upstream changes, and isolated install/load evidence.
5 results
Always-on dependency and compatibility monitoring for DeepSeek Harness plugins, including exact paths, upstream changes, and isolated install/load evidence.
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks confirmed destructive ops.
依赖安全审计:扫描项目依赖的已知漏洞(OSV.dev)并检测过期依赖(npm registry),返回漏洞严重级/修复版本与升级幅度
Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.
自适应 GitHub README 撰写与截图技能:先判断目标类型与截图能力——网页走浏览器截图,无网页的控制台/CLI 走终端截屏(System.Drawing / HTML 终端 / termtosvg),能则询问并自动配图,不能则走无截图模板;强调相对路径防丢图。作为 dsh 插件(cordis skill-bundle)安装后由 host 层注册 readme-writer 技能;SKILL.md 含可被插件商城索引的 name/description/keywords/category/version 元数据。