
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
dsh-quota-hub
Advanced tools
Unified real-time quota dashboard for DeepSeek Harness: OpenCodeGo windows, DeepSeek balance, OpenRouter credits, SiliconFlow and Moonshot balances in one collapsible panel — auto-detects configured credentials, no keys leave the host.
Unified real-time quota dashboard for DeepSeek Harness.
One collapsible glass panel shows every provider quota/balance you care about — OpenCodeGo rolling/weekly/monthly windows, DeepSeek official balance, OpenRouter credits, SiliconFlow and Moonshot balances — refreshed on a timer, with a live health dot on the sidebar button. API keys stay on the host: the browser only ever receives parsed numbers.
OPENCODE_GO_API_KEY, DEEPSEEK_API_KEY,
OPENROUTER_API_KEY, SILICONFLOW_API_KEY, MOONSHOT_API_KEY in DSH
credentials / env). Unconfigured providers show collapsed as “未配置”.~/.dsh/dsh-quota-hub.json (dot-path field extraction).dsh plugin --profile web add dsh-quota-hub
Restart DSH afterwards. The 💰 额度 button appears in the sidebar footer.
~/.dsh/dsh-quota-hub.json:
{
"refreshMs": 120000,
"providers": [
{
"id": "my-relay",
"label": "My Relay",
"url": "https://relay.example.com/v1/usage",
"credential": "MY_RELAY_API_KEY",
"fields": [
{ "key": "used", "label": "已用", "path": "usage.used", "unit": "USD" },
{ "key": "percent", "label": "用量", "path": "usage.percent", "percent": true }
]
}
]
}
credential names a DSH credential/env var (Bearer auth). Or drop
credential and put a static headers object on the entry instead — note
that stores the token in the config file in plain text.
Host: a top-level quotaHub Remote service resolves each adapter's
credential via ctx.credentials, fetches the provider endpoint (10 s timeout,
refreshMs cache, shared in-flight requests), and returns normalized
snapshots. Client: the panel double-unwraps the transport envelope exactly
like the core messageFeedback remote and renders provider cards.
MIT
Built for the DeepSeek Harness plugin ecosystem — thanks to the community on LINUX DO for feedback and testing.
FAQs
Unified real-time quota dashboard for DeepSeek Harness: OpenCodeGo windows, DeepSeek balance, OpenRouter credits, SiliconFlow and Moonshot balances in one collapsible panel — auto-detects configured credentials, no keys leave the host.
The npm package dsh-quota-hub receives a total of 49 weekly downloads. As such, dsh-quota-hub popularity was classified as not popular.
We found that dsh-quota-hub demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.