
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
dsh-unplug
Advanced tools
Plug/unplug any DeepSeek Harness plugin cleanly: list every mounted layer, disable/enable without deleting, remove bundles + patch rows + dependencies in one pass, and audit for orphaned/dangling plugin state. Zero runtime dependencies; read-only by defau
让 DeepSeek Harness(dsh)的插件装得容易、拔得干净——所有插件都能插拔自如。 Plug/unplug any DeepSeek Harness plugin cleanly. 简体中文 · English
为什么需要它? 官方 dsh plugin remove 只处理 profile 里 dsh.profile.bundles 列表中的 bundle:
cordis.patch.yml 里残留的插件行dsh-unplug 补上这三个缺口。
dsh plugin add dsh-unplug
dsh-unplug # 什么都不输:直接给你中文菜单
dsh-unplug list # 列出所有已挂载插件(bundles + 补丁行)
dsh-unplug remove <插件> --yes # 完整卸载(bundle + 补丁行 + 依赖)
dsh-unplug remove --yes # 忘写插件名?自动列出已装插件
dsh-unplug disable <插件> # 禁用但不删除(保留依赖,可随时启用)
dsh-unplug enable <插件> # 重新启用
dsh-unplug audit # 检测孤立行 / 悬空 bundle
dsh-unplug fix --yes # 一键修复(reconcile 的傻瓜版)
dsh-unplug list --all # 一次看所有 profile
选项:--profile <名>(找不到会自动找)、--home <路径>、--json、--yes、--dry-run。
安装后 agent 获得 unplug 工具:
list / audit — 只读,任何时候可用remove / reconcile — 需要 force: true 显式确认disable / enable — 可逆操作,无需确认返回 dsh-unplug/v1 报告。
dsh.profile.bundles)— 移出列表 + pnpm removedsh.profile.disabledBundles)— 在 bundles/disabled 之间移动cordis.patch.yml — 删除插件行或切换 disabled: truecordis.patch.yml — 同上默认只读;remove / reconcile 需要显式 --yes(CLI)或 force: true(工具)。
Why? The official dsh plugin remove only handles bundles in the profile's
dsh.profile.bundles list. It does not:
cordis.patch.yml (profile or home level)dsh-unplug fills all three gaps.
dsh plugin add dsh-unplug
dsh-unplug list # show every mounted plugin row
dsh-unplug # no args → friendly menu
dsh-unplug remove <plugin> --yes # fully unplug (bundle + patch + deps)
dsh-unplug remove --yes # forgot the name? we list installed ones
dsh-unplug disable <plugin> # disable without deleting
dsh-unplug enable <plugin> # re-enable
dsh-unplug audit # detect orphaned/dangling state
dsh-unplug fix --yes # one-command fix (alias for reconcile)
dsh-unplug list --all # scan every profile
Options: --profile <name> (auto-falls back), --home <path>, --json, --yes, --dry-run.
Once installed, the agent gains the unplug tool:
list / audit — always allowed (read-only)remove / reconcile — require force: truedisable / enable — reversible, no confirmation neededReturns a dsh-unplug/v1 report.
dsh.profile.bundles) — remove entry + pnpm removedsh.profile.disabledBundles) — move between bundles/disabled listscordis.patch.yml — delete entry or toggle disabled: truecordis.patch.yml — same as aboveRead-only by default; remove / reconcile require explicit --yes (CLI) or force: true (tool).
MIT
FAQs
Plug/unplug any DeepSeek Harness plugin cleanly: list every mounted layer, disable/enable without deleting, remove bundles + patch rows + dependencies in one pass, and audit for orphaned/dangling plugin state. Zero runtime dependencies; read-only by defau
The npm package dsh-unplug receives a total of 0 weekly downloads. As such, dsh-unplug popularity was classified as not popular.
We found that dsh-unplug demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.