Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
By Sarah Gooding - Oct 21, 2026
New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
dsh-plugin-codegraph-tree-sitter
Advanced tools
dsh-plugin-codegraph-tree-sitter
Self-built code-graph indexer for DeepSeek Harness — parses a workspace with web-tree-sitter and writes schema version 4 to .codegraph/codegraph.db, the same on-disk format the codegraph CLI writes, so no external indexer is required
dsh-plugin-codegraph-tree-sitter
Self-built code-graph indexer. Parses TypeScript, TSX, JavaScript, JSX, Python, Go, Java, C, C++, C#, PHP, Rust, Ruby, Zig, Kotlin, Swift, Dart, and Scala with web-tree-sitter and writes schema version 4 to .codegraph/codegraph.db, so a workspace needs no external indexer. Registers only an indexer, never a store.
Part of dsh-plugin-codegraph — structural code intelligence for DeepSeek Harness.
Most users should install the bundle instead, which mounts this package and its siblings in one layer:
dsh plugin --profile <name> add dsh-plugin-codegraph
See the project README for setup, configuration, and the full tool reference.
License
FAQs
Self-built code-graph indexer for DeepSeek Harness — parses a workspace with web-tree-sitter and writes schema version 4 to .codegraph/codegraph.db, the same on-disk format the codegraph CLI writes, so no external indexer is required
We found that dsh-plugin-codegraph-tree-sitter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 21 Aug 2026
Related posts
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
By Sarah Gooding - Oct 20, 2026
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
By Sarah Gooding - Oct 16, 2026