
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
dsh-codebase-memory-mcp
Advanced tools
DSH plugin that bridges the local codebase-memory-mcp knowledge-graph server through the built-in @deepseek-ai/dsh-mcp-client, with a runtime-configurable exe path (settings namespace).
A DeepSeek Harness plugin that bridges the
local codebase-memory-mcp knowledge-graph MCP server into DSH — reusing the
built-in @deepseek-ai/dsh-mcp-client bridge, so you don't implement any MCP
transport yourself.
The model sees tools named mcp__codebase-memory__* (index_repository,
search_graph, trace_path, query_graph, detect_changes, … — 14 tools in
total).
dsh plugin --profile web add dsh-codebase-memory-mcp
Then reload the DSH web host (restart the app, or use the in-app reload).
dsh plugin --profile web add link:D:\path\to\dsh-codebase-memory-mcp
The plugin reads its configuration from the codebase-memory-mcp settings
namespace. The default exePath is codebase-memory-mcp, i.e. it assumes the
server binary is on your PATH. If your binary lives elsewhere (e.g. a
downloaded codebase-memory-mcp.exe), set the absolute path in
Settings → Plugins → Plugin configuration → codebase-memory-mcp (or your
profile's settings document). Saving hot-reloads the bridge — no restart needed.
| Setting | Default | Meaning |
|---|---|---|
exePath | codebase-memory-mcp | Command/executable for the MCP server. |
cwd | (exe's directory) | Working directory for the spawned server. |
extraArgs | (empty) | Extra CLI args, space-separated, appended to the command. |
mcp__codebase-memory__* tools do you have?"mcp__codebase-memory__index_repository, mcp__codebase-memory__search_graph, etc.mcp-client(codebase-memory) is active and 14 tools were discovered.DSH host
└─ composition loads this plugin (cordis.patch.yml insert)
└─ wrapper plugin apply(ctx):
1) ctx.settings.register('codebase-memory-mcp', schema)
2) read scope.get() → build mcp config → ctx.plugin(mcpApply, cfg) (dynamic)
3) scope.watch(() => { handle.dispose(); re-launch }) ← settings change = hot reload
The bridge itself is the built-in @deepseek-ai/dsh-mcp-client; this package
only contributes the composition entry and a runtime-configurable settings
namespace.
npm publish (registry verifies repository maps back to the same repo, preventing name squatting).codebase-memory-mcp
settings namespace and is edited via DSH's settings document / generic editor.
A point-and-click card would require replicating DSH's client-bundle build.@deepseek-ai/dsh-mcp-client etc. from this
package, add those packages as dependencies or symlink them into the profile.MIT
FAQs
DSH plugin that bridges the local codebase-memory-mcp knowledge-graph server through the built-in @deepseek-ai/dsh-mcp-client, with a runtime-configurable exe path (settings namespace).
The npm package dsh-codebase-memory-mcp receives a total of 0 weekly downloads. As such, dsh-codebase-memory-mcp popularity was classified as not popular.
We found that dsh-codebase-memory-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.