
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
dsw-workshop-plugin
Advanced tools
DeepSeek Harness 的「github-dsh插件市场」插件 —— 浏览、搜索、一键安装 DSH 生态插件。
dsh plugin --profile web add …(npm 优先秒装),已安装插件自动标注「已安装」环境要求
- DSH web 环境:本插件运行于
webprofile(dsh web)- Node.js + pnpm:
dsh plugin命令依赖 pnpm(corepack enable pnpm或npm i -g pnpm)- gh CLI(已登录):GitHub 数据源(注册表搜索 / README / 订阅更新)经
gh调用 api.github.com- git:订阅本地副本(克隆 / 更新 / 回滚)功能需要
- 网络:可达 npm registry 与 api.github.com
- 已配置 LLM 模型:描述自动翻译与 AI 摘要功能使用 DSH 默认模型
dsh plugin --profile web add dsw-workshop-plugin
重启 dsh web —— 侧边栏出现「github-dsh插件市场」,此后每次启动自动加载。
git clone https://github.com/Liaominduyh/GitHub-dsh-plugin-market ~/.dsh/plugins/dsw-workshop-plugin
dsh plugin --profile web add link:~/.dsh/plugins/dsw-workshop-plugin
cordis.patch.yml — bundle 激活补丁(dsh plugin add 后自动加入 profile 的 dsh.profile.bundles)lib/index.js — Host 侧:webServer HTTP 路由 /dsw-workshop/api/*(注册表聚合 / 官方安装 / 订阅管理 / 翻译 / 摘要)lib/client.js — Client 侧:__ModuleLoader__.load bundle(React UI + fetch 桥接)~/.dsh/plugins/dsw-workshop-plugin/data/(subscriptions / summaries / translations / registry)webServer 服务注册 HTTP 路由__ModuleLoader__.load 格式浏览器 bundle,依赖 dsh-client-runtime / dsh-client-ui-slots / reactdsh plugin 依赖),GitHub 数据经 gh CLI / api.github.com 获取FAQs
github-dsh插件市场:双源聚合 2830+ 插件浏览、官方一键安装、自动翻译、git 订阅管理
The npm package dsw-workshop-plugin receives a total of 0 weekly downloads. As such, dsw-workshop-plugin popularity was classified as not popular.
We found that dsw-workshop-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.