@moonquake2004/dsh-security 0.1.6 → 0.1.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@moonquake2004/dsh-security",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.7",
|
|
4
4
|
"description": "Unified security check framework for DeepSeek Harness ecosystem — covers the full plugin lifecycle (discovery → install → runtime → update → retirement)",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "src/index.mjs",
|
|
@@ -16,7 +16,13 @@
|
|
|
16
16
|
"scripts": {
|
|
17
17
|
"test": "node --test test/*.mjs"
|
|
18
18
|
},
|
|
19
|
-
"keywords": [
|
|
19
|
+
"keywords": [
|
|
20
|
+
"dsh",
|
|
21
|
+
"deepseek-harness",
|
|
22
|
+
"security",
|
|
23
|
+
"audit",
|
|
24
|
+
"plugin"
|
|
25
|
+
],
|
|
20
26
|
"author": "moonquake2004",
|
|
21
27
|
"license": "MIT",
|
|
22
28
|
"engines": {
|
|
@@ -121,7 +121,7 @@ export async function run(profileDir) {
|
|
|
121
121
|
).join('\n');
|
|
122
122
|
|
|
123
123
|
return fail(id, Severity.HIGH,
|
|
124
|
-
`检测到 ${affected.length}
|
|
124
|
+
`检测到 ${affected.length} 处 plugin×peer 版本对受 dist-tag 异常影响（涉及 ${new Set(affected.map((a) => a.plugin)).size} 个插件；#2763：@deepseek-ai/* 子包 latest 卡在 broken 版本）：\n${details}`,
|
|
125
125
|
'对受影响插件显式 pin 版本（dsh plugin add <pkg>@<working-version>），或等待官方修复 dist-tags',
|
|
126
126
|
['#2763']
|
|
127
127
|
);
|