
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
dsh-text-diff
Advanced tools
Line-level text/file diff plugin for DeepSeek Harness: LCS-based unified diff format with configurable context. Pairs with dsh-diff-writer to form a find-and-fix loop.
两文本 / 两文件的行级 diff 插件(dsh / DeepSeek Harness)。基于 LCS(最长公共子序列)动态规划,输出 unified diff 格式变更块。零依赖,与 dsh-diff-writer 组成找差-修复闭环。
npm install dsh-text-diff
cordis.patch.yml 已随包声明,dsh 宿主加载后自动注册 diff_text。
| 参数 | 类型 | 说明 |
|---|---|---|
| a_text / a_file | string | 文本或文件路径(A 侧,二选一) |
| b_text / b_file | string | 文本或文件路径(B 侧,二选一) |
| context | number | 每个变更块的上下文行数(默认 3,0 只显示变更行,上限 50) |
diff_text { a_file: "a.js", b_file: "b.js" }
diff_text { a_text: "old code...", b_text: "new code..." }
输出格式:
diff: +1 -2(8 行未变,1 个变更块,上下文 1 行)
@@ -3,3 +3,2 @@
keep2
-old-a
-old-b
+new-a
keep3
一致性时返回 两份内容完全一致(N 行)。;A/B 侧为空时另一侧全部记为 add/del。
diff_text 定位差异 → dsh-line-ops extract_lines 查看上下文 → dsh-diff-writer apply_patch 精确修复git diff(可通过 dsh-git-helper 触发)npm test
--stat 概览模式(仅统计不显示内容)FAQs
Line-level text/file diff plugin for DeepSeek Harness: LCS-based unified diff format with configurable context. Pairs with dsh-diff-writer to form a find-and-fix loop.
The npm package dsh-text-diff receives a total of 213 weekly downloads. As such, dsh-text-diff popularity was classified as not popular.
We found that dsh-text-diff demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.