
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@anweat/dsh-substrate
Advanced tools
Diagnoses DeepSeek Harness plugin conflicts and guides a version-locked external repair when one is available.
dsh-substrate diagnoses DeepSeek Harness plugin conflicts and supplies a reversible, version-locked repair for duplicate loader entry IDs.
The Web card is read-only. It reports the detected DSH installation, the exact loader version, and the repair state. The external CLI performs installation changes so the running DSH process never rewrites its own dependencies.
dsh plugin --profile web add @anweat/dsh-substrate@^0.1.1
Restart DSH after installing the plugin. Open the Substrate compatibility card to inspect the current state.
Check whether the detected installation is supported:
npx --yes @anweat/dsh-substrate@0.1.1 repair --home "<DSH_HOME>"
Apply the repair, then restart DSH:
npx --yes @anweat/dsh-substrate@0.1.1 repair --home "<DSH_HOME>" --apply --yes
Revert the repair, then restart DSH again:
npx --yes @anweat/dsh-substrate@0.1.1 repair --home "<DSH_HOME>" --revert --yes
The repair currently supports these exact packages:
@deepseek-ai/cordis-plugin-include@1.0.6@deepseek-ai/cordis-plugin-include@1.0.7@deepseek-ai/dsh-app-boot@0.1.2-alpha.2 through 0.1.2-alpha.5Unknown versions are refused before any file is changed. The CLI stages a pnpm patch in the real DSH installation workspace, runs pnpm install, verifies the installed file, and supports a matching revert transaction.
This repair removes the duplicate entry-ID boot gate. It does not automatically isolate plugins that also claim the same Cordis service or tool names. Those later runtime conflicts still need service realms and tool scopes supplied by the host composition.
Version 0.1.0 users must add npm's peer-dependency compatibility flag when running the standalone CLI:
npx --yes --legacy-peer-deps @anweat/dsh-substrate@0.1.0 repair --home "<DSH_HOME>"
See the compatibility matrix, browser coexistence verification, and tested boundaries.
FAQs
Diagnoses DeepSeek Harness plugin conflicts and guides a version-locked external repair when one is available.
The npm package @anweat/dsh-substrate receives a total of 153 weekly downloads. As such, @anweat/dsh-substrate popularity was classified as not popular.
We found that @anweat/dsh-substrate demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.