
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
dsh-plugins-pack
Advanced tools
Context packing for dsh: compile files + skills + memory + recent session highlights into a bounded-context pack file, and estimate the skills-catalog context budget (Codex 2% progressive-disclosure rule).
借鉴:Codex 技能「2% 上下文预算/渐进披露」+ Claude CLAUDE.md 分层记忆 + Pi resources 机制。
把任务相关的文件 + 技能目录 + 持久记忆 + 最近会话要点,编译成有字符预算的 markdown 上下文包——喂给子代理/新会话不撑爆 prompt。
| 工具 | 功能 |
|---|---|
pack_build | 构建上下文包(paths 文件/目录 + 技能目录 + MEMORY.md + 最近 N 会话) |
pack_list / pack_show | 列表 / 读取 |
pack_budget | 技能目录上下文预算估算(2% 规则) |
存储:~/.dsh/packs/<name>.md
pack_build name=项目X paths=[/workspace/algorithm/foo/src,/workspace/algorithm/foo/README.md] keywords="修复 bug"
pack_budget
FAQs
Context packing for dsh: compile files + skills + memory + recent session highlights into a bounded-context pack file, and estimate the skills-catalog context budget (Codex 2% progressive-disclosure rule).
The npm package dsh-plugins-pack receives a total of 10 weekly downloads. As such, dsh-plugins-pack popularity was classified as not popular.
We found that dsh-plugins-pack demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.