
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
DeepSeek Harness (dsh) plugin: run work as a small crew of role agents (product manager, researcher, architect, engineer, test engineer, code engineer, QA, code reviewer, security reviewer, doc reviewer) that talk through files on disk, with the PM as the
Version 0.12.0.
dsh-crew is a plugin for DeepSeek Harness (dsh). It turns your dsh session into a product manager (PM) that runs a crew of role agents: architect, engineer, test engineer, code engineer, QA, code reviewer, security reviewer, doc reviewer, and researcher.
You talk to the PM. The PM starts role agents for the work, and every decision is written down in documents that stay in the repository.
Two lanes:
ask — you want an answer. The PM answers. Nothing changes.team — you want a change. The PM runs the crew: one task per change, one round
of QA, one round of each review, then a commit. Pushing and publishing still need
your own yes, every time.dsh plugin --profile tui add dsh-crew # or --profile web
Restart dsh. Pick the Crew preset for a session.
Everything is optional. Settings live in two places:
dsh-crew-core and dsh-crew-git-guard rows in your profile's
cordis.patch.yml: roles folder, live-agent limit, review rounds, job folder,
and the git guard.dsh-crew-roles row: per-role tools and models. Which file holds it
depends on your dsh. On dsh 0.1.x it is the plugin's copy of the preset at
~/.dsh/.agent-presets/crew/agent.cordis.yml. On dsh 0.2.x — which reads
preset rows and never that folder — it is the preset-crew row in the
plugin's own cordis.patch.yml, and your profile's cordis.patch.yml can
override it by that row id. Set a role filter in the file your dsh reads.MIT
FAQs
DeepSeek Harness (dsh) plugin: run work as a small crew of role agents (product manager, researcher, architect, engineer, test engineer, code engineer, QA, code reviewer, security reviewer, doc reviewer) that talk through files on disk, with the PM as the
The npm package dsh-crew receives a total of 0 weekly downloads. As such, dsh-crew popularity was classified as not popular.
We found that dsh-crew demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.