
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@sofagent/dsh-plugin-kit
Advanced tools
DSH 适配层基座——把 cordis-plugin-sofagent-* 的 98 行样板收敛成 createSofagentPlugin() 一次调用(正常 npm 发布物:六款原子插件以包名 @sofagent/dsh-plugin-kit 依赖它)
DSH 适配层基座——把 7 个 cordis-plugin-sofagent-* 的样板(pluginMeta / 懒加载 invoke / apply 三段式)收成一次 createSofagentPlugin() 调用。适配层红线(不 import 宿主类型 / 缺席降级不抛 / 桥接懒加载)见 src/index.ts 头注,seam 契约见 ../SEAMS.md。
invoke(...args) 把位置参数逐位原样透传给桥接包的 @public API——不重组、不命名、不包装。第 n 个入参落在目标函数第 n 个形参:
// 桥接 @sofagent/audit.runRules 时(位置签名逐位对齐)
await invoke(diffFiles, logEntries, task, strict, silent, commitMsg, config, ...)
// ≡ runRules(diffFiles, logEntries, task, strict, silent, commitMsg, config, ...)
多包桥接(bridges)按声明序解析,调用第一个可用包(同款位置透传);全部不可用才 throw(错误含逐包原因),部分可用即部分成功(仅降级日志)。
FAQs
DSH 适配层基座——把 cordis-plugin-sofagent-* 的 98 行样板收敛成 createSofagentPlugin() 一次调用(正常 npm 发布物:六款原子插件以包名 @sofagent/dsh-plugin-kit 依赖它)
The npm package @sofagent/dsh-plugin-kit receives a total of 76 weekly downloads. As such, @sofagent/dsh-plugin-kit popularity was classified as not popular.
We found that @sofagent/dsh-plugin-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.