dsh-code-security
Advanced tools
对代码与 Git 改动进行本地静态安全检查，并追踪修复结果。
欢迎使用，遇到问题或有改进建议，请提交 issues 和 PR。
桌面版可在「插件」面板按包名 dsh-code-security 安装。已配置 dsh 命令时也可使用：
dsh plugin --profile desktop add dsh-code-security
网页版把命令中的 desktop 改为 web。安装后重启 DSH。
安装后可说：“审查当前 Git 改动的安全问题，给出位置和证据，再复查修复结果。”
默认在本机执行确定性规则检查。规则覆盖与基线、策略配置见使用说明。
详细配置、工具参数与排错见使用说明。从源码独立开发时，Node 要求以 package.json 为准。
FAQs
对代码与 Git 改动进行本地静态安全检查，并追踪修复结果。
The npm package dsh-code-security receives a total of 418 weekly downloads. As such, dsh-code-security popularity was classified as not popular.
We found that dsh-code-security demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.