
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
dshbase-catalog
Advanced tools
Query the dshbase plugin directory from inside DeepSeek Harness — search, list, and get install commands for 1700+ plugins.
Query the dshbase plugin directory from inside DeepSeek Harness — search, list, and get install commands for 1,100+ community plugins without leaving your session.
dsh plugin add dshbase-catalog
Requires DeepSeek Harness 0.2, including Desktop 0.2.0-rc.2. Framework packages (@deepseek-ai/dsh, @deepseek-ai/dsh-tools, @deepseek-ai/cordis) are peerDependencies resolved from the host install, and every tool parameters block is a JSON Schema object root.
| Tool | Description |
|---|---|
search_dsh_plugins | Full-text search across plugin name + description |
get_dsh_plugin | Look up one plugin: install command, verification status, stats |
list_dsh_plugins | List plugins by category |
get_dsh_stats | Catalog totals (plugins, npm vs git, verification) |
get_dsh_categories | All categories with counts |
The catalog snapshot is regenerated daily from the live dshbase directory (see scripts/sync-catalog.py), so the built-in index stays current.
MIT
FAQs
Query the dshbase plugin directory from inside DeepSeek Harness — search, list, and get install commands for 1700+ plugins.
The npm package dshbase-catalog receives a total of 2,181 weekly downloads. As such, dshbase-catalog popularity was classified as popular.
We found that dshbase-catalog demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.