upstream-radar 0.6.0 → 0.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -4
- package/dist/src/version.d.ts +1 -1
- package/dist/src/version.js +1 -1
- package/docs/README.zh-CN.md +2 -2
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -44,7 +44,7 @@ The initializer writes a reviewable inventory; it does not start polling until `
|
|
|
44
44
|
If you want to try the monitoring loop without booting a DSH profile, run one cycle from a reviewed inventory:
|
|
45
45
|
|
|
46
46
|
```bash
|
|
47
|
-
upstream-radar radar watch ./upstream-radar.config.json --once
|
|
47
|
+
pnpm dlx upstream-radar@latest radar watch ./upstream-radar.config.json --once
|
|
48
48
|
```
|
|
49
49
|
|
|
50
50
|
Remove `--once` to keep a local monitor alive. This is a lightweight CLI surface for demos, CI, and diagnosis; the native DSH bundle remains the recommended always-on path because it can deliver the task to a live Agent.
|
|
@@ -167,7 +167,7 @@ This proof runs in CI on Node.js 22. See the executable [showcase contract](exam
|
|
|
167
167
|
For a local process or a scheduled runner, the same loop is available as:
|
|
168
168
|
|
|
169
169
|
```bash
|
|
170
|
-
upstream-radar radar watch ./upstream-radar.config.json --interval 1800
|
|
170
|
+
pnpm dlx upstream-radar@latest radar watch ./upstream-radar.config.json --interval 1800
|
|
171
171
|
```
|
|
172
172
|
|
|
173
173
|
Use `--once --json` for a machine-readable CI check. The command persists the same state file and emits only new, changed, or resolved incidents.
|
|
@@ -248,8 +248,8 @@ Advisories, release notes, links, package names, and repository strings remain u
|
|
|
248
248
|
The bounded pre-install scanner remains available as a supporting collector:
|
|
249
249
|
|
|
250
250
|
```bash
|
|
251
|
-
upstream-radar scan /path/to/dsh-plugin
|
|
252
|
-
upstream-radar inspect npm:dsh-cloudflare-browser-run@0.1.1 --deep
|
|
251
|
+
pnpm dlx upstream-radar@latest scan /path/to/dsh-plugin
|
|
252
|
+
pnpm dlx upstream-radar@latest inspect npm:dsh-cloudflare-browser-run@0.1.1 --deep
|
|
253
253
|
```
|
|
254
254
|
|
|
255
255
|
## Current boundaries
|
package/dist/src/version.d.ts
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export declare const TOOL_VERSION = "0.6.
|
|
1
|
+
export declare const TOOL_VERSION = "0.6.1";
|
|
2
2
|
//# sourceMappingURL=version.d.ts.map
|
package/dist/src/version.js
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export const TOOL_VERSION = '0.6.
|
|
1
|
+
export const TOOL_VERSION = '0.6.1';
|
|
2
2
|
//# sourceMappingURL=version.js.map
|
package/docs/README.zh-CN.md
CHANGED
|
@@ -35,7 +35,7 @@ dsh --profile web
|
|
|
35
35
|
如果只想先试跑一次监控，而不启动 DSH profile，可以使用同一份清单：
|
|
36
36
|
|
|
37
37
|
```bash
|
|
38
|
-
upstream-radar radar watch ./upstream-radar.config.json --once
|
|
38
|
+
pnpm dlx upstream-radar@latest radar watch ./upstream-radar.config.json --once
|
|
39
39
|
```
|
|
40
40
|
|
|
41
41
|
去掉 `--once` 就会持续运行。这个入口适合演示、CI 和排查；需要把任务交给在线 Agent 时，仍然应该安装 DSH bundle。
|
|
@@ -156,7 +156,7 @@ pnpm run try:dsh
|
|
|
156
156
|
如果需要在本地进程或定时任务里运行同一套监控，也可以使用：
|
|
157
157
|
|
|
158
158
|
```bash
|
|
159
|
-
upstream-radar radar watch ./upstream-radar.config.json --interval 1800
|
|
159
|
+
pnpm dlx upstream-radar@latest radar watch ./upstream-radar.config.json --interval 1800
|
|
160
160
|
```
|
|
161
161
|
|
|
162
162
|
CI 中使用 `--once --json`。它复用同一个状态文件，只输出新建、变化和恢复的事件。
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "upstream-radar",
|
|
3
|
-
"version": "0.6.
|
|
3
|
+
"version": "0.6.1",
|
|
4
4
|
"description": "Dependency security monitoring for DeepSeek Harness (DSH) plugins: find the exact vulnerable path or breaking update, then route evidence to a DSH Agent.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "Apache-2.0",
|