
Security News
eMudhra, Brotli, and the Long Tail of a Security Fix
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.
dsh-plugin-blender-3d
Advanced tools
Affected versions:
DeepSeek Harness plugin: drive Blender 3D modeling (primitives, boolean CSG, transform, material, modifier, scene, export STL/OBJ/PLY/GLTF) via a JSON bridge. Bundles a headless trimesh+manifold3d runtime and a Blender bpy add-on. · DSH 插件:通过 JSON 桥接驱动 Bl
A DeepSeek Harness plugin that lets the agent drive 3D modeling through a JSON bridge — create primitives, run boolean CSG, transform, assign materials/modifiers, query the scene, and export STL/OBJ/PLY/GLTF/GLB.
It bundles two interchangeable runtimes speaking the same protocol:
| Runtime | Needs Blender? | Engine | Use when |
|---|---|---|---|
headless_bridge.py (default) | ❌ no | trimesh + manifold3d | headless servers, CI, the harness |
blender_ai_bridge/ add-on | ✅ Blender 3.0+ | bpy | you want full Blender power |
Point the tool at a running Blender (set AIB_PORT to the add-on's port) and the same commands upgrade to real Blender — no code change.
dsh plugin --profile web add dsh-plugin-blender-3d
Restart dsh web (or let HMR pick it up). The plugin registers two model-facing tools:
blender_model — { command, args } → JSON result. Commands: create_shape, boolean, transform, duplicate, delete, rename, material, modifier, mesh_edit, scene, selection, scene_clear, camera, light, render, export, import, script, command, document.blender_scene — lightweight scene summary (names/types/counts, no mesh data).It also contributes the blender-3d-modeling skill (auto-installed into $DSH_HOME/skills on first load if absent).
Heavy geometry never enters the Node/JSON tool channel. Exports return a file_path; the agent reads the model from disk with its own file tools. This is the fix for the Node Ineffective mark-compacts near heap limit crash that occurs when full meshes are stuffed into JSON.
| Env / config | Default | Meaning |
|---|---|---|
AIB_PORT | 13082 | bridge port (set to the add-on port to drive real Blender) |
AIB_HOST | 127.0.0.1 | bridge host |
AIB_PYTHON | python3 | interpreter for the headless bridge |
pip install numpy trimesh manifold3d
See PUBLISH.md. TL;DR: npm publish → open a PR to
awesome-dsh-plugin/awesome-dsh-plugin
adding registry-entry.json to the list.
MIT
node examples/carve_block.mjs # box minus sphere -> carved.stl
FAQs
DeepSeek Harness plugin: drive Blender 3D modeling (primitives, boolean CSG, transform, material, modifier, scene, export STL/OBJ/PLY/GLTF) via a JSON bridge. Bundles a headless trimesh+manifold3d runtime and a Blender bpy add-on. · DSH 插件:通过 JSON 桥接驱动 Bl
The npm package dsh-plugin-blender-3d receives a total of 46 weekly downloads. As such, dsh-plugin-blender-3d popularity was classified as not popular.
We found that dsh-plugin-blender-3d demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.

Security News
Cloudflare introduces tsrs, a Rust port of TypeScript’s compiler promising faster checks and lower memory use, with the TypeScript team’s help.