
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
Native Windows toast + system tray for DeepSeek Harness (dsh): the only dsh plugin with a tray icon. Pops the moment the agent stops running — finished / aborted / error / output limit / waiting for your choice / session closed — body labeled with workspa
唯一带系统托盘的 Windows 原生通知插件:agent 不再运行时(完成 / 停止 / 出错 / 等你选择 / 会话关闭)自动弹原生 Toast,正文标注「工作区 · 会话」,任务栏托盘常驻鲸鱼图标——跑长任务时切走窗口,瞄一眼托盘就知道跑完了没。
零运行时依赖、零构建,dsh plugin add 一条命令装完即用。

真实 Windows Toast 实拍:正文标注「工作区 · 会话」,任务栏托盘鲸鱼图标常驻。
rootsOnly 默认仅根会话通知,子代理不刷屏;cooldownMs 同会话同类型两次通知最小间隔;dsh plugin add 一条命令装完即用。rootsOnly: true 默认值,需要观察子代理时再关掉。dsh plugin --profile web add dsh-notify
GitHub 安装:dsh plugin --profile web add github:Pasumao/dsh-plugin-notify
源码安装(本地开发 / 调试):
git clone https://github.com/Pasumao/dsh-plugin-notify.git
cd dsh-plugin-notify
npm install
# 以 link: 方式挂载进 profile(包名 dsh-notify)
装完重启 dsh web,任务栏出现鲸鱼图标即生效。
兼容性:Windows 10/11 · Node ≥ 22.5 · 实测于 DSH
0.1.1-rc.2。
在 profile 的 cordis.patch.yml 按 id dsh-plugin-notify 覆盖 config。常用项:
| key | 默认 | 说明 |
|---|---|---|
cooldownMs | 10000 | 同会话同类型两次通知的最小间隔(毫秒) |
rootsOnly | true | 仅根会话通知,子代理不刷屏 |
tray | true | 托盘图标开关 |
titlePrefix | 'dsh' | 通知标题前缀 |
node scripts/test-harness.mjs # 弹三条真实 Toast 自测
rootsOnly: true;需要观察子代理时再改为 false;cooldownMs(默认 10000ms)即可;tray: true 配置项是否被覆盖。本插件属于 Pasumao 的 dsh 插件生态,同系列已发布插件可搭配使用:
| 插件(npm) | GitHub | 说明 |
|---|---|---|
| dsh-plugin-choice-refresh | GitHub 仓库 | 选择增强:重新生成选项 / 更多选项 |
| dsh-plugin-dev-kb | GitHub 仓库 | 插件开发知识库(官方文档完整镜像 + 技能) |
| dsh-plugin-image-tools | GitHub 仓库 | 图片选择卡 + 回复内嵌图片 + 盲模型收图 |
| dsh-plugin-table-zoom | GitHub 仓库 | 聊天长表格浮窗查看 + 一键复制 Markdown |
| dsh-plugin-windows-guard | GitHub 仓库 | Windows 环境防坑:守则技能 + 乱码检测 / 危险写拦截 / 编码诊断修复 |
| dsh-plugin-workbench | GitHub 仓库 | VS Code 风格文件浏览器 + 可编辑预览 |
本系列其余插件见 Pasumao · dsh 插件;觉得好用欢迎到 GitHub 点 ⭐。
代码与文档由 AI 辅助生成(DeepSeek Harness),均经人工审查与实机验证
(scripts/test-harness.mjs 弹真实 Toast 自测)。
FAQs
Native Windows toast + system tray for DeepSeek Harness (dsh): the only dsh plugin with a tray icon. Pops the moment the agent stops running — finished / aborted / error / output limit / waiting for your choice / session closed — body labeled with workspa
The npm package dsh-notify receives a total of 170 weekly downloads. As such, dsh-notify popularity was classified as not popular.
We found that dsh-notify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.