
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
dsh-browser-jev
Advanced tools
DSH browser plugin — Jev (System One) decision backend for the browser action loop (name reservation; implementation ships from the dsh-browser-cdp repository).
Name reservation (0.0.1). No implementation — this version only reserves the npm name for the Jev decision-backend provider of the DSH (DeepSeek Harness) browser plugin.
Planned scope: drive the browser action loop's discrete choices (which candidate element / which control action) with the Jev System One decision model, behind the plugin's provider seam (rule → Laya → Jev with explicit, never-silent fallback).
See also: dsh-browser-cdp (the plugin itself), dsh-browser-laya (local
sidecar backend).
FAQs
DSH browser plugin — Jev (System One) decision backend for the browser action loop (name reservation; implementation ships from the dsh-browser-cdp repository).
The npm package dsh-browser-jev receives a total of 11 weekly downloads. As such, dsh-browser-jev popularity was classified as not popular.
We found that dsh-browser-jev demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.