
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
@sofagent/dsh-plugin-kit
Advanced tools
DSH 适配层基座——把 cordis-plugin-sofagent-* 的 98 行样板收敛成 createSofagentPlugin() 一次调用(正常 npm 发布物:六款原子插件以包名 @sofagent/dsh-plugin-kit 依赖它)
DSH 适配层基座——把 7 个 cordis-plugin-sofagent-* 的样板(pluginMeta / 懒加载 invoke / apply 三段式)收成一次 createSofagentPlugin() 调用。适配层红线(不 import 宿主类型 / 缺席降级不抛 / 桥接懒加载)见 src/index.ts 头注,seam 契约见 ../SEAMS.md。
invoke(...args) 把位置参数逐位原样透传给桥接包的 @public API——不重组、不命名、不包装。第 n 个入参落在目标函数第 n 个形参:
// 桥接 @sofagent/audit.runRules 时(位置签名逐位对齐)
await invoke(diffFiles, logEntries, task, strict, silent, commitMsg, config, ...)
// ≡ runRules(diffFiles, logEntries, task, strict, silent, commitMsg, config, ...)
多包桥接(bridges)按声明序解析,调用第一个可用包(同款位置透传);全部不可用才 throw(错误含逐包原因),部分可用即部分成功(仅降级日志)。
FAQs
DSH 适配层基座——把 cordis-plugin-sofagent-* 的 98 行样板收敛成 createSofagentPlugin() 一次调用(正常 npm 发布物:六款原子插件以包名 @sofagent/dsh-plugin-kit 依赖它)
The npm package @sofagent/dsh-plugin-kit receives a total of 63 weekly downloads. As such, @sofagent/dsh-plugin-kit popularity was classified as not popular.
We found that @sofagent/dsh-plugin-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.