
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@deepseek-ai/cordis-plugin-loader
Advanced tools
Runtime plugin loader for Cordis. The loader owns an EntryTree, imports plugin
modules by name, applies their config, and keeps the running plugin graph in
sync with entry updates.
import { Context } from 'cordis'
import Loader from '@cordisjs/plugin-loader'
const root = new Context()
await root.plugin(Loader, { baseUrl: import.meta.url })
const id = await root.loader.create({
name: './plugins/example',
config: { enabled: true },
})
await root.loader.await()
root.loader.update(id, { config: { enabled: false } })
| Field | Description |
|---|---|
id | Stable id for resolving, updating, and removing the entry. |
name | Module specifier imported by the loader. |
config | Config passed to the plugin. |
group | Marks the entry as a group whose config is a child entry list. |
disabled | Stops the entry and prevents it from starting. |
inject | Adds required services or intercept config for this entry. |
| API | Description |
|---|---|
loader.create(options, parent?, position?) | Add and start an entry. |
loader.update(id, options, parent?, position?) | Update, move, and restart an entry. |
loader.remove(id) | Stop and delete an entry. |
loader.resolve(id) | Resolve an entry by id, including nested a:b ids. |
loader.resolveGroup(id) | Resolve the root group or a nested group. |
loader.await() | Wait for pending entry imports and fiber reloads. |
loader.locate(fiber?) | Return the loader entry id that owns a fiber. |
For file-backed trees, use @cordisjs/plugin-include.
FAQs
Plugin loader for cordis
The npm package @deepseek-ai/cordis-plugin-loader receives a total of 332,137 weekly downloads. As such, @deepseek-ai/cordis-plugin-loader popularity was classified as popular.
We found that @deepseek-ai/cordis-plugin-loader demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.