
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
dsh-o11y-plugin
Advanced tools
Unified observability (trace/log/metric) for deepseek-harness plugins: hooks dsh session telemetry where available, maintains OTel signals where not, and exports via standard OTLP.
Unified plugin-dimension observability (trace / log / metric) for deepseek-harness (dsh).
dsh ships session-level OTel telemetry but exposes no metric or plugin-scoped
observability to plugins. dsh-o11y-plugin converges that gap: it registers
global OpenTelemetry providers so any plugin using the standard
@opentelemetry/api exports traces, metrics, and logs through a single,
consistently configured pipeline, and it bridges dsh session telemetry into
OTel logs. It is intended for plugin authors who want standard,
community-compatible observability without implementing OTel per plugin.
| Item | Value |
|---|---|
| DSH compatibility | @deepseek-ai/dsh 0.1.0-rc.6–rc.8 (optional bridge hook unchanged; no dsh service deps) |
| Runtime dependency | @deepseek-ai/cordis 4.0.1 only |
| Last verified | 2026-08-20 (unit tests against @deepseek-ai/cordis 4.0.1) |
| Node | ^22.19 || >=24 |
| Profiles | headless, web |
Built on the official OpenTelemetry Node.js SDK, the same dependency family as
dsh's session-telemetry-otel.
# install
dsh plugin --profile web add github:fly3366/dsh-o11y-plugin
# disable for one profile
dsh plugin --profile web remove dsh-o11y-plugin
# or disable at runtime via config: enabled=false
The plugin is stateless; removal requires no data cleanup.
dsh plugin --profile headless add github:fly3366/dsh-o11y-plugin
# point exports at a collector (optional; silent without one)
OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4318 dsh --profile headless "say hi"
Any plugin that calls trace.getTracer(...) / metrics.getMeter(...) /
logs.getLogger(...) from @opentelemetry/api is then exported automatically.
deepjit is the reference consumer,
emitting pipeline counters and GenAI (gen_ai.*) LLM spans.
The same knobs are exposed as an o11y namespace in the dsh Web settings UI
(via @deepseek-ai/dsh-settings), so they can be viewed and edited there; they
persist and apply on the next dsh start. This no-ops on dsh versions without
the settings service.
A reference Web settings card (client half) is developed on the
wip/settings-uibranch; dsh does not yet let external bundles inject into the web client composition, so it is not shipped onmain.
| Key | Default | Description |
|---|---|---|
enabled | true | master switch |
serviceName | '' (→ OTEL_SERVICE_NAME → dsh-plugin) | OTel resource service.name |
endpoint | '' (→ OTEL_EXPORTER_OTLP_ENDPOINT → http://localhost:4318) | OTLP/HTTP endpoint |
enableTraces / enableMetrics / enableLogs | true | per-signal toggles |
metricExportIntervalMs | 60000 | periodic metric export interval |
bridgeSessionTelemetry | true | bridge dsh session telemetry into OTel logs |
Sensitive: no credentials are read or stored; only the optional OTLP endpoint is network-facing.
endpoint and collector
availability.dsh plugin --profile <p> remove dsh-o11y-plugin or set
enabled=false.npm install
npm run typecheck
npm test
npm run build
Contributions welcome; keep the OTel SDK dependency family aligned with dsh's
session-telemetry-otel for community compatibility.
MIT. Report vulnerabilities privately per SECURITY.md.
FAQs
Unified observability (trace/log/metric) for deepseek-harness plugins: hooks dsh session telemetry where available, maintains OTel signals where not, and exports via standard OTLP.
The npm package dsh-o11y-plugin receives a total of 18 weekly downloads. As such, dsh-o11y-plugin popularity was classified as not popular.
We found that dsh-o11y-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.