
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
dsh-web-notes
Advanced tools
Floating notes for the dsh web GUI: keep commands, credentials, parameter values and other important snippets at hand while working, insert any note straight into the composer, and save any selected text (e.g. from an AI answer) as a note with one click
Floating notes for the DeepSeek Harness web GUI (dsh web). Keep commands, credentials, parameter values and any other important snippets at hand while working — and feed them back into the conversation with one click.
prefers-reduced-motion.$DSH_HOME/notes/notes.json (default ~/.dsh/notes/notes.json), atomic writes, tolerant reads.--dsw-alias-*), so the UI matches the official light/dark theme out of the box AND recolors live when a skin plugin (dsh-skins / skin-center) is installed — no reload, no skin-specific code.dsh plugin --profile web add dsh-web-notes
dsh plugin --profile web add link:/path/to/dsh-web-notes
Then add the bundle to the profile manifest so it actually boots:
# append "dsh-web-notes" to the bundles list in ~/.dsh/profiles/web/package.json
# under "dsh" > "profile" > "bundles", then restart dsh web
The official
dsh plugin --profile web add <spec>command forwards to pnpm; it installs the package but does not edit thedsh.profile.bundlesmanifest — that list decides which installed packages boot. Add the package name there (or ship acordis.patch.ymlinsert via an aggregator bundle) and restart.
Notes are searchable by title, content and tags (comma-separated in the editor).
The plugin registers a notes settings namespace and a settings card in 设置 → 插件 → 插件配置 (the namespace is also editable via ~/.dsh/settings.yaml):
notes:
enabled: true # master switch: false hides the dock entirely
selectionCapture: true # false disables the selection "Save as note" bubble
dockMode: floating # floating (draggable) | fixed (chat window top-right)
buttonSize: large # small | regular | large
defaultGlobal: false # new notes default to global (all sessions)
All five options are editable live in the settings card; the dock and panel pick up changes immediately.
Notes may contain credentials, tokens, or other sensitive values. They are stored in plaintext in a local JSON file (~/.dsh/notes/notes.json, same trust model as ~/.dsh/credentials.yaml) and are served only to the loopback browser UI. Do not store secrets you cannot afford to expose on this machine, and protect the file with your OS-level user permissions. Exporting/backing up that file also exports every note.
pnpm install
pnpm run build # tsc -b (types) + tsdown (lib/index.js + lib/client.js)
node scripts/smoke-host.mjs # standalone host-logic smoke test (no dsh app needed)
Architecture:
src/index.ts, src/service.ts, src/routes.ts, src/persist.ts) — cordis plugin row notes; CRUD service, atomic JSON persistence, loopback-guarded /api/notes/* routes, settings namespace.src/client/) — global floating surface mounted on document.body (notes have no session dimension); talks to the host through same-origin JSON; inserts into the composer through the official conversation input facade (ctx.conversation.input.for(actx).setDraft(...)).The client bundle is built as a closure-factory artifact (window.__ModuleLoader__.load({ id: 'dsh-web-notes', factory })) served by the web plugin table at /plugins/dsh-web-notes/client.js.
Apache-2.0. © 2025 Shrbuz — see NOTICE for attribution.
FAQs
Floating notes for the dsh web GUI: keep commands, credentials, parameter values and other important snippets at hand while working, insert any note straight into the composer, and save any selected text (e.g. from an AI answer) as a note with one click
The npm package dsh-web-notes receives a total of 0 weekly downloads. As such, dsh-web-notes popularity was classified as not popular.
We found that dsh-web-notes demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.