
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
An unofficial Claude-inspired light/dark theme for DeepSeek Harness with responsive layout, safe Markdown preview, and zero telemetry.
A calm, warm-neutral interface for DeepSeek Harness.
Light and dark. Desktop and mobile. English and Chinese. Zero telemetry.
Ivory gives the DSH web interface a quieter reading rhythm without changing how the harness works. Warm neutrals replace cold grays, editorial type improves long responses, and the conversation stays usable from a narrow phone window to a wide desktop. DeepSeek branding and every native DSH capability remain in place.
dsh plugin --profile web add dsh-ivory
dsh web
Hard-refresh the page with Cmd/Ctrl + Shift + R, then open
Settings → Ivory Theme. The main theme is enabled by default; the optional
focus mode stays off until you choose it.
Install the exact GitHub release without using npm.
dsh plugin --profile web add github:ZJUZhiyuCai/dsh-ivory#v0.2.12
Remove Ivory and return to the native DSH interface.
dsh plugin --profile web remove dsh-ivory
| Area | What Ivory changes |
|---|---|
| Appearance | A complete warm-neutral palette for light and dark mode, with restrained shadows, corners, and editorial typography. |
| Responsive layout | Host-adaptive, drag-resizable conversation geometry tested at 375, 768, 1,440, and 1,920 pixels. |
| Reading and copying | Independent controls for prose, user bubbles, and code blocks, plus a small end-of-response marker. |
| Markdown documents | A bounded, DOM-built preview for .md output with source view always available and HTTP(S)-only links. |
| Accessibility | Keyboard focus, reduced-motion behavior, forced-colors fallbacks, and WCAG AA muted text contrast. |
| Compatibility | Structural styling degrades to stable theme tokens when the verified DSH selector contract changes. |
![]() | ![]() |
| Focused desktop conversation | 390 px mobile layout |
Ivory is a browser-only visual plugin. Its host entry point is intentionally inert.
| Boundary | Ivory behavior |
|---|---|
| Bundled runtime dependencies | None. DSH client modules and React are peers. |
| Filesystem and process access | None. |
| Network requests and telemetry | None. |
| Persistent data | Two local preference flags in localStorage. |
| User content | Presented in the browser; copied only after an explicit click. |
| Third-party branding | No Anthropic fonts, logos, icons, or application code. |
The npm package contains eight allowlisted files and is checked on every CI run. Read the full security policy, architecture boundary, and third-party notices.
[!NOTE] DeepSeek Harness is in developer preview and may make breaking UI changes. Ivory 0.2.12 is verified against DSH 0.1.2-rc.1 through 0.1.5 and its current web client modules. When Ivory cannot prove the current structural contract, it keeps token-level theming and releases the host layout back to DSH.
npm ci
npm test # renderer unit tests, then the static release gates, build, publint, and package checks
npm run qa:r2 # 74 browser regressions; DSH must run at 127.0.0.1:3080
npm run qa:adversarial # 33 stress checks: reconciliation safety, toggle/resize storms, degraded mode
npm run qa:activity # 26 checks for thinking/tool-call rows, icons, and terminal polish
npm run qa:micro # 28 Vision Toolkit/Ivory micro-component checks; set DVT_CLIENT_JS if the toolkit is not installed in the DSH web profile
npm run qa:host # 10 checks against the live host: contract health, sidebar/composer/settings surfaces, both themes
npm run qa:contract # diagnostic probe (no pass/fail): self-diagnosis channel plus a live selector inventory
The last two need DSH_QA_TOKEN from the dsh web URL. Every QA entry point in
package.json is documented here, and a release check fails if one goes missing.
The browser suite covers responsive layout, composer focus, dark mode, Markdown injection attempts, streaming state, lifecycle cleanup, block-copy payloads, plugin coexistence, long tables, reduced motion, and forced colors.
Releases use npm Trusted Publisher with GitHub OIDC. The repository stores no long-lived npm publish token, and future CI releases receive npm provenance automatically.
npm ci
npm run build
dsh plugin --profile web add link:$PWD
dsh web
Edit src/skin.css, src/client.template.js, or src/markdown.js, then run npm run build.
The generated lib/client.js is committed so GitHub installs need no build
permission.
src/skin.css theme and compatibility styles
src/client.template.js client lifecycle and optional enhancements
src/markdown.js capped DOM-built Markdown preview renderer
scripts/test-markdown.mjs renderer unit tests (node --test)
lib/client.js deterministic generated browser bundle
lib/index.js inert host entry point
cordis.patch.yml DSH bundle registration
scripts/ build and verification gates
See CONTRIBUTING.md before opening a pull request.
Ivory is unofficial and is not affiliated with, endorsed by, or sponsored by Anthropic or DeepSeek. Claude is a trademark of Anthropic PBC. DeepSeek and DeepSeek Harness may be trademarks of their respective owners.
Released under the MIT License.
FAQs
An unofficial Claude-inspired light/dark theme for DeepSeek Harness with responsive layout, safe Markdown preview, and zero telemetry.
The npm package dsh-ivory receives a total of 311 weekly downloads. As such, dsh-ivory popularity was classified as not popular.
We found that dsh-ivory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.