MicroMilo/upstream-radar

README 摘要

Upstream Radar Know which upstream changes actually matter to your coding-agent projects. Always-on vulnerability and breaking-change impact monitoring for DeepSeek Harness plugins, with a native DSH adapter and a vendor-neutral task bridge for Codex, Claude Code, and other coding agents. Vulnerability scanners tell you that a package is affected. Release bots tell you that a new version exists. They usually do not tell you: - which plugin brought that package into a project; - which exact dependency path is affected when multiple versions coexist; - whether the vulnerable feature is reachable in this repository; - whether the available upgrade breaks Node.js, DSH, the plugin entrypoint, or its bundle; - which coding agent should investigate, and how to avoid handing untrusted advisory text control of that agent. Upstream Radar closes that gap. See it in 60 seconds The upstream-radar commands below refer to the package binary. From an unlinked source checkout, run the equivalent command as node dist/src/cli.js ... after pnpm build . The network-free showcase starts from this installed graph: When a new advisory affects only [email protected] , the result is routed through the exact path…

分类