
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
dsh-ghost-refresh
Advanced tools
Ghost Refresh (鬼影提神) — a friendly ghost drifts across the page to keep you awake. Adjustable speed / opacity / size / frequency, persisted per browser.
一只友好的小幽灵会定时飘过你的 DeepSeek Harness 网页界面——提神醒脑,防止摸鱼睡着。
A friendly ghost drifts across your DeepSeek Harness web UI at random intervals — a tiny nudge to keep you awake and refreshed.
prefers-reduced-motion 下自动隐藏)dsh plugin --profile web add dsh-ghost-refresh
然后重启 DSH。(desktop profile 把 web 换成 desktop。)
npm 包尚未发布时,也可以直接从 GitHub 安装:
dsh plugin --profile web add github:ZomiCC/ghost-refresh
dsh plugin --profile web remove dsh-ghost-refresh
package.json # dsh.client(浏览器半边)+ dsh.bundle(组合补丁)声明
cordis.patch.yml # 向 profile 插入插件行
lib/index.js # 宿主半边(本插件纯浏览器侧,宿主为空实现)
lib/client.js # 浏览器半边:幽灵图层 + 设置按钮 + localStorage 持久化
FAQs
Ghost Refresh (鬼影提神) — a friendly ghost drifts across the page to keep you awake. Adjustable speed / opacity / size / frequency, persisted per browser.
The npm package dsh-ghost-refresh receives a total of 4 weekly downloads. As such, dsh-ghost-refresh popularity was classified as not popular.
We found that dsh-ghost-refresh demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.