
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
dsh-code-check
Advanced tools
Code review tool for DeepSeek Harness: integrates ESLint, Prettier and heuristic checks to produce structured review reports with fix suggestions.
DeepSeek Harness (dsh) 代码审查插件:整合 ESLint 静态检查、Prettier 格式校验与启发式问题分析,输出包含问题列表、分级与修复建议的结构化审查报告。
--fix 自动修复的条目.. 逃逸与符号链接越权eslint --fix 再输出修复后的报告npm install dsh-code-check
或在 dsh 配置中引用插件路径:
plugins:
- id: code-check
name: "绝对路径/dsh-code-check/index.js"
code_review参数
| 参数 | 类型 | 必填 | 说明 |
|---|---|---|---|
path | string | 与 snippet 二选一 | 要审查的文件路径(相对 dsh 工作目录) |
snippet | string | 与 path 二选一 | 要审查的代码片段文本 |
language | string | 否 | snippet 的语言:javascript/typescript/json/css/html/markdown(默认 javascript) |
fix | boolean | 否 | 为 true 时先执行 eslint --fix 再出报告(默认 false) |
使用示例
对话中直接说:
审查一下 src/index.ts
Agent 会调用:
{ "path": "src/index.ts" }
审查代码片段:
{
"snippet": "var a = 1\nif (a == 1) { console.log(a) }",
"language": "javascript"
}
# 📋 代码审查报告
**审查目标**: src/index.js(124 行,3.2 KB)
**整体评分**: ⭐ A(96/100)
## 📊 问题概览 —— 错误/警告/可自动修复/格式/建议 计数表
## ❌ 必须修复(Error) —— [行:列] 规则名 + 说明 + 修复建议
## ⚠️ 建议改进(Warning)
## 💡 风格与潜在问题 —— TODO 标记、console 残留、超长行、eval 风险等
## 🎨 代码格式 —— Prettier 差异行数与修复命令
## 🔧 下一步行动 —— 可执行的修复入口
child_process.execFile 运行,--format json 输出后解析为结构化消息列表;片段审查时以临时目录为 cwd,避免规则匹配范围外文件被忽略eslint.config.*;缺失时报错信息识别后自动切换插件内置 eslint.fallback.config.mjs100 - 8×错误 - 3×警告 - 6×格式失败 - 1×建议,A≥90 / B≥75 / C≥60 / D<60cd dsh-code-check
pnpm install
pnpm test # 15 项断言:报告结构、问题检出、格式校验、参数校验、路径安全、渲染独立性
pnpm lint
FAQs
Code review tool for DeepSeek Harness: integrates ESLint, Prettier and heuristic checks to produce structured review reports with fix suggestions.
The npm package dsh-code-check receives a total of 20 weekly downloads. As such, dsh-code-check popularity was classified as not popular.
We found that dsh-code-check demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.