
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
dsh-dead-links
Advanced tools
DSH 插件:Markdown 文档死链检查工具,注册一个 dead_links 工具。纯 ESM、零依赖、无构建、只读不改任何文件。
dead_linksnode:fs 递归遍历目录,按 glob(默认 **/*.md)筛选 Markdown 文件;逐文件按行正则提取 http(s):// 链接(保留行号);并发受限地逐条检查,先 HEAD(AbortSignal.timeout 超时),遇到 405/403/网络错误 降级 GET(只关心状态码,读完响应体即丢弃);最终把每条死链的 文件/行号/URL/状态码或错误 折叠进规范 JSON 值返回。dead[].status: null + dead[].error);目录不存在则返回 { ok: false, error: { stage: 'fs', message } }。dsh plugin --profile <name> add file:./plugins/dsh-dead-links
# 或发布后:
dsh plugin --profile <name> add dsh-dead-links
| 参数 | 类型 | 必填 | 默认 | 说明 |
|---|---|---|---|---|
dir | string | — | docs | 相对工作区根的目录。默认 docs,不存在时回退到工作区根 . 并在结果中注明 |
glob | string | — | **/*.md | 简单通配模式,仅支持 *(段内)与 **(跨段)两种通配,匹配相对 dir 的路径 |
concurrency | number | — | 5 | 并发检查的 URL 数量,夹取到 1–10 |
timeoutMs | number | — | 10000 | 单条请求超时(毫秒) |
规范 JSON 值(ok: true 时):
{
"ok": true,
"dir": "docs", // 实际扫描的目录(回退后)
"filesScanned": 12, // 命中 glob 并扫描的文件数
"linksFound": 58, // 提取到的链接出现次数
"linksChecked": 33, // 实际检查的唯一 URL 数(按 URL 去重)
"dead": [ // 死链列表(每条 = 一次出现位置)
{ "file": "guide.md", "line": 42, "url": "https://gone.invalid/x", "status": 404 },
{ "file": "api.md", "line": 7, "url": "https://nx.invalid/", "status": null, "error": "getaddrinfo ENOTFOUND …" }
],
"durationMs": 2345,
"truncated": false, // dead 超过 100 条时截断为 true
"note": "…" // 目录回退 / 截断 / 取消等说明,存在时给出
}
ok: false(目录不可用)时:{ "ok": false, "error": { "stage": "fs", "message": "…" } }。
HEAD 探测,绝大多数站点对已存在的资源返回 2xx/3xx/4xx,无需下载响应体。HEAD 返回 405 Method Not Allowed 或 403 Forbidden(部分站点/网关禁用 HEAD),或 HEAD 本身网络失败时,降级为 GET 复测。GET 只关心状态码:以流式方式读完响应体后立即丢弃,不落盘、不缓冲整包。concurrency(默认 5)控制同时在途的请求数,避免对目标站点造成突发压力。linksChecked 即唯一 URL 数,linksFound 为出现总次数。本插件只做「单次扫描」。配合一个跨会话调度器(如未来的 dsh-scheduler:定时器触发 → 空闲时 followup(…, { source: { kind: 'cron' } }),忙碌时 inject() 注入通知),即可实现「每周自动跑一遍 dead_links,把死链清单推给模型审阅/修复」:
dead_links(dir/glob 固定指向文档目录);dead 非空时调度器把结果 inject 进会话,让模型生成修复建议或直接改文档;MIT
FAQs
DSH plugin: Markdown dead-link checker tool (dead_links), zero-dependency.
The npm package dsh-dead-links receives a total of 22 weekly downloads. As such, dsh-dead-links popularity was classified as not popular.
We found that dsh-dead-links demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.