upstream-radar 0.6.0 → 0.6.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/README.md +6 -6
  2. package/dist/src/version.d.ts +1 -1
  3. package/dist/src/version.js +1 -1
  4. package/docs/README.zh-CN.md +4 -4
  5. package/package.json +1 -1
package/README.md CHANGED
@@ -30,7 +30,7 @@ Use a DSH profile that already contains at least one third-party bundle. Replace
30
30
 
31
31
  ```bash
32
32
  dsh plugin --profile web add upstream-radar@latest
33
- pnpm dlx upstream-radar@latest init \
33
+ pnpm dlx --package=upstream-radar@latest upstream-radar init \
34
34
  --profile web \
35
35
  --project-name "My DSH project" \
36
36
  --workspace "$PWD" \
@@ -44,7 +44,7 @@ The initializer writes a reviewable inventory; it does not start polling until `
44
44
  If you want to try the monitoring loop without booting a DSH profile, run one cycle from a reviewed inventory:
45
45
 
46
46
  ```bash
47
- upstream-radar radar watch ./upstream-radar.config.json --once
47
+ pnpm dlx --package=upstream-radar@latest upstream-radar radar watch ./upstream-radar.config.json --once
48
48
  ```
49
49
 
50
50
  Remove `--once` to keep a local monitor alive. This is a lightweight CLI surface for demos, CI, and diagnosis; the native DSH bundle remains the recommended always-on path because it can deliver the task to a live Agent.
@@ -103,7 +103,7 @@ dsh plugin --profile web add upstream-radar@latest
103
103
  Generate the inventory from the DSH profile instead of writing the dependency graph by hand:
104
104
 
105
105
  ```bash
106
- pnpm dlx upstream-radar@latest init \
106
+ pnpm dlx --package=upstream-radar@latest upstream-radar init \
107
107
  --profile web \
108
108
  --project-name "My DSH project" \
109
109
  --workspace "$PWD" \
@@ -167,7 +167,7 @@ This proof runs in CI on Node.js 22. See the executable [showcase contract](exam
167
167
  For a local process or a scheduled runner, the same loop is available as:
168
168
 
169
169
  ```bash
170
- upstream-radar radar watch ./upstream-radar.config.json --interval 1800
170
+ pnpm dlx --package=upstream-radar@latest upstream-radar radar watch ./upstream-radar.config.json --interval 1800
171
171
  ```
172
172
 
173
173
  Use `--once --json` for a machine-readable CI check. The command persists the same state file and emits only new, changed, or resolved incidents.
@@ -248,8 +248,8 @@ Advisories, release notes, links, package names, and repository strings remain u
248
248
  The bounded pre-install scanner remains available as a supporting collector:
249
249
 
250
250
  ```bash
251
- upstream-radar scan /path/to/dsh-plugin
252
- upstream-radar inspect npm:dsh-cloudflare-browser-run@0.1.1 --deep
251
+ pnpm dlx --package=upstream-radar@latest upstream-radar scan /path/to/dsh-plugin
252
+ pnpm dlx --package=upstream-radar@latest upstream-radar inspect npm:dsh-cloudflare-browser-run@0.1.1 --deep
253
253
  ```
254
254
 
255
255
  ## Current boundaries
package/dist/src/version.d.ts CHANGED
@@ -1,2 +1,2 @@
1
- export declare const TOOL_VERSION = "0.6.0";
1
+ export declare const TOOL_VERSION = "0.6.2";
2
2
  //# sourceMappingURL=version.d.ts.map
package/dist/src/version.js CHANGED
@@ -1,2 +1,2 @@
1
- export const TOOL_VERSION = '0.6.0';
1
+ export const TOOL_VERSION = '0.6.2';
2
2
  //# sourceMappingURL=version.js.map
package/docs/README.zh-CN.md CHANGED
@@ -21,7 +21,7 @@
21
21
 
22
22
  ```bash
23
23
  dsh plugin --profile web add upstream-radar@latest
24
- pnpm dlx upstream-radar@latest init \
24
+ pnpm dlx --package=upstream-radar@latest upstream-radar init \
25
25
  --profile web \
26
26
  --project-name "我的 DSH 项目" \
27
27
  --workspace "$PWD" \
@@ -35,7 +35,7 @@ dsh --profile web
35
35
  如果只想先试跑一次监控，而不启动 DSH profile，可以使用同一份清单：
36
36
 
37
37
  ```bash
38
- upstream-radar radar watch ./upstream-radar.config.json --once
38
+ pnpm dlx --package=upstream-radar@latest upstream-radar radar watch ./upstream-radar.config.json --once
39
39
  ```
40
40
 
41
41
  去掉 `--once` 就会持续运行。这个入口适合演示、CI 和排查；需要把任务交给在线 Agent 时，仍然应该安装 DSH bundle。
@@ -94,7 +94,7 @@ dsh plugin --profile web add upstream-radar@latest
94
94
  不用手写依赖图，可以直接从 DSH profile 生成项目清单：
95
95
 
96
96
  ```bash
97
- pnpm dlx upstream-radar@latest init \
97
+ pnpm dlx --package=upstream-radar@latest upstream-radar init \
98
98
  --profile web \
99
99
  --project-name "我的 DSH 项目" \
100
100
  --workspace "$PWD" \
@@ -156,7 +156,7 @@ pnpm run try:dsh
156
156
  如果需要在本地进程或定时任务里运行同一套监控，也可以使用：
157
157
 
158
158
  ```bash
159
- upstream-radar radar watch ./upstream-radar.config.json --interval 1800
159
+ pnpm dlx --package=upstream-radar@latest upstream-radar radar watch ./upstream-radar.config.json --interval 1800
160
160
  ```
161
161
 
162
162
  CI 中使用 `--once --json`。它复用同一个状态文件，只输出新建、变化和恢复的事件。
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "upstream-radar",
3
- "version": "0.6.0",
3
+ "version": "0.6.2",
4
4
  "description": "Dependency security monitoring for DeepSeek Harness (DSH) plugins: find the exact vulnerable path or breaking update, then route evidence to a DSH Agent.",
5
5
  "type": "module",
6
6
  "license": "Apache-2.0",