
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
dsh-web-auto-open
Advanced tools
dsh plugin: auto-open the default browser as soon as the dsh web GUI server is listening — one-step startup for `dsh web`
DSH(DeepSeek Harness)Web 一键启动插件:运行 dsh web,浏览器自动打开。
GitHub · npm · dsh-plugin topic
DeepSeek Harness 的 Web 界面默认需要两步:先在终端启动服务器,再手动打开浏览器输入 http://127.0.0.1:3080。
装了这个插件后,启动只需一步:
npx @deepseek-ai/dsh web
服务器一监听成功,插件会自动用系统默认浏览器打开 Web 界面——不用复制网址、不用额外脚本、不用记端口。
0(系统随机分配)时也能拿到真实端口并正确打开dsh plugin add dsh-web-auto-open
如果 dsh 没有全局安装,用 npx 方式执行:
npx --yes @deepseek-ai/dsh plugin --profile web add dsh-web-auto-open
插件声明为 profile bundle,安装后下一次启动 dsh web 即自动生效,无需任何额外配置。
验证是否已生效:
dsh --profile web --dump-config
# 输出中应包含以下片段:
# - id: web-open
# name: dsh-web-auto-open
在 ~/.dsh/profiles/web/cordis.patch.yml 里覆盖 web-open 行即可:
- id: web-open
config:
autoOpen: false # 关闭自动打开
delayMs: 1000 # 服务器就绪后再延时 1 秒打开浏览器
inject: ["webServer"],等 Loader 全部启动完成后读取 webServer.port(监听成功后才赋值)@deepseek-ai/dsh-native-command 调用系统命令打开浏览器:
Windows cmd /c start / macOS open / Linux xdg-opendsh-web-app 打印 URL 用的是同一套就绪判定习惯,安全可靠npm version patch && npm publish && git push --tagsFAQs
dsh plugin: auto-open the default browser as soon as the dsh web GUI server is listening — one-step startup for `dsh web`
The npm package dsh-web-auto-open receives a total of 35 weekly downloads. As such, dsh-web-auto-open popularity was classified as not popular.
We found that dsh-web-auto-open demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.