MicroMilo/upstream-radar

Name: MicroMilo/upstream-radar
Author: MicroMilo

Plugin插件 Native原生 ⭐ 12 Apache-2.0 Migration & Compatibility迁移与兼容 Subagents & Orchestration子代理与编排

扫描并监控DeepSeek Harness插件：找出确切的依赖与兼容性问题，然后为作者和代理保留可修复的报告。

Project Overview项目介绍

Edited by Zhiwei Agent (zhiwei)由知微Agent(zhiwei)编辑

Upstream Radar is a native compatibility testing tool built exclusively for the DeepSeek Harness (DSH) plugin ecosystem. It binds exact plugin versions, DSH host releases, and runtime profiles together in disposable GitHub virtual machines to generate reproducible test results. It automatically re-runs tests whenever the DSH ecosystem changes or existing test evidence expires, so it always tests against current versions rather than just new code diffs. You can run your first test without a local DSH profile by using the pre-packaged npx installation method described in the official project README.

This tool is designed for DSH plugin developers and ecosystem maintainers to catch compatibility issues that slip past individual repository testing. Its standard workflow follows four core steps: first it builds an exact compatibility record that aligns the npm artifact, source commit, DSH host, runtime environment, and dependency paths. Next, an AI agent reads the plugin’s installation documentation to derive a bounded, reproducible install plan. Then it tests the plugin across three execution planes on isolated, fresh, secret-free GitHub runners: headless load, Chromium Web boot, and real PTY TUI interaction.

Upstream Radar is released under the permissive full open-source Apache-2.0 license, so it can be used and modified freely for both personal and commercial projects. It does not issue timeless compatibility badges or security certifications; instead, it only records verified evidence of compatibility for a specific plugin × DSH × runtime combination. Missing or incomplete test evidence is never marked as a passing result. Confirmed compatibility failures are filed as fixable issues directly to public plugin maintainers, and any environment-related detection gaps are held for automated calibration and retested.

Upstream Radar 是专为 DeepSeek Harness（DSH）插件生态系统开发的原生兼容性测试工具，通过在临时 GitHub 虚拟机中绑定精确的插件版本、DSH 主机版本和运行环境，实现持续的兼容性验证。它会在生态系统更新或原有测试结果过期时自动重新测试，确保测试结果反映当前版本的真实兼容情况，而非仅针对代码差异。

它面向 DSH 插件开发者和生态维护者，标准工作流分为四个核心步骤：构建精确的兼容性记录，由 AI 智能体根据插件安装说明推导有边界的可复现安装计划，在全新隔离的 Runner 中分别测试三个执行平面，最后在依赖或环境变化时自动触发重测，失败结果整理为可修复报告。

Upstream Radar 采用 Apache-2.0 许可证开源，无需本地 DSH 配置即可运行首次测试，可通过 npx 命令快速检查任意已发布的 DSH 插件版本。它不提供永久有效的兼容性徽章或安全证书，仅记录特定组合下的实际运行证据，缺失证据永远不会被标记为通过。

View on GitHub在 GitHub 查看

Send to your DSH发给你的 DSH 安装

请帮我安装这个 DSH 插件。安装前先完成【兼容性检查 + 安全性检查】，检查通过再动手。

插件：upstream-radar（MicroMilo/upstream-radar）
仓库：https://github.com/MicroMilo/upstream-radar
本站详情页：https://www.yhbd.top/plugins/micromilo-upstream-radar/
本站登记：类型 plugin · 归类 原生 DSH 插件 · 许可证 Apache-2.0 · ⭐ 12 · 最近提交 2026-10-03 · 主语言 TypeScript

按下面顺序执行，每步先把结论告诉我，再进入下一步：

【1 兼容性检查】
① 我这边：DSH 版本、Node 版本、操作系统、当前 profile（web / desktop）。
② 读它的 README、package.json、插件 manifest，列出它要求的 DSH 版本 / Node 版本 / 操作系统 / 外部依赖 / 需要另外先装的运行时。
③ 逐条比对，结论只写「满足 / 不满足 / 未知」三种；不满足的给出可行替代方案。
④ 检查是否和我已装的插件冲突：命令名重复、skill / tool 重名、端口占用、重复注册的 MCP server。

【2 安全性检查】
① 仓库可信度：和上面「本站登记」是否一致；star / fork 数、创建时间、最近提交，是否归档或长期停更。
② 安装脚本：逐行看 package.json 的 preinstall / install / postinstall，以及 install.sh、setup.ps1 之类脚本。出现 curl|bash、下载后直接执行、混淆代码、访问与插件功能无关的域名，立刻停下来告诉我，不要继续装。
③ 依赖：列出新增依赖，标出无人维护、或与知名包拼写近似的可疑包（typosquatting）。
④ 权限与副作用：它会读写哪些目录、访问哪些域名、需要哪些 DSH 权限（filesystem / network / shell / clipboard 等），以及怎么卸载和回滚。
⑤ 如果它要求 sudo / 管理员权限，或权限明显超出功能所需，先停下来问我。

【3 安装】
上面两步没有「不满足」和「高危项」时才执行；用官方推荐方式安装，不要自行提权。

【4 汇报】
用表格输出：检查项 / 结论 / 依据 / 是否需要我决策。拿不准的一律写「未知」并说明要我怎么确认——不要猜，也不要替我决定。

Send this message to DSH in your current session: it verifies compatibility and security first (answering met / not met / unknown item by item) and only installs once everything checks out — it will stop and ask you if it finds a high-risk item. The box scrolls; the copy is the full prompt. CLI install commands may not be accurate across systems, so DSH is the safer route.把上面这条消息直接发给当前会话里的 DSH：它会先核对兼容性与安全性（逐条给「满足 / 不满足 / 未知」），确认没问题再安装，有高危项会停下来问你。框内可滚动，复制到的是完整提示词；安装命令不一定准确，发给 DSH 更稳。

Pre-install check安装前体检Compatibility · Security兼容性 · 安全性 1 note1 项提示

12 stars - an early-stage project星标 12，属于早期项目

DSH walks through these 9 checksDSH 会逐条核对这 9 项

Compatibility兼容性

DSH, Node, OS and profile requirementsDSH 版本 / Node 版本 / 操作系统 / profile 是否满足要求
External dependencies and runtimes (Electron / Python / Docker, ...)外部依赖与运行时（Electron / Python / Docker 等）是否齐备
Conflicts with installed plugins: command names, skill / tool names, ports, duplicate MCP registration与已装插件是否冲突：命令名、skill / tool 重名、端口占用、重复 MCP 注册

Security安全性

Repo matches the facts registered here; archived or abandoned?仓库是否与页面登记一致，是否归档或长期停更
Safety of preinstall / install / postinstall and install.sh / setup.ps1preinstall / install / postinstall 与 install.sh、setup.ps1 是否安全
curl|bash, download-then-execute, obfuscation, unrelated domains → stop immediatelycurl|bash、下载即执行、混淆代码、无关域名 → 立刻停止
Typosquatting or unmaintained packages among the new dependencies新增依赖里有没有 typosquatting 或无人维护的包
Requested permissions vs. what the feature actually needs申请了哪些权限、是否超出功能所需（filesystem / network / shell / clipboard）
Any sudo / admin requirement, plus uninstall and rollback是否要求 sudo / 管理员权限，以及卸载与回滚方式

Anything uncertain must be marked unknown with a note on how to confirm it. This site's signal screen is a static snapshot, not a security audit.拿不准的必须标「未知」并说明要我怎么确认。本站的信号筛查是静态快照，不能替代安全审计。

Or use CLI install (for developers)或使用命令行安装（适合开发者）

CLI Install命令行安装

dsh plugin --profile web add github:MicroMilo/upstream-radar

把 MicroMilo/upstream-radar 加入你的 DSH 配置（web profile）即可启用。

READMEREADME

6.4 KB · 缓存于 2026-09-29 05:50:26 · 6.4 KB

Upstream Radar

Know which DeepSeek Harness plugins still work—before users find out they do not.

简体中文 ·

Upstream Radar watches exact DSH and plugin releases, persists every affected case, and wakes an Agent only when the input changes. The Agent reads the repository, chooses evidence-backed Node.js and execution profiles, installs and runs the exact artifacts in disposable CI, watches them while they run, and publishes a reviewable compatibility report.

No guessed matrix. No “install succeeded, therefore compatible.” No silent unknowns.

What you get

Change-driven analysis — a DSH release fans out to your plugin cohort; a plugin release analyzes only that plugin.
Agent-owned environment discovery — README, manifests, lockfiles, CI, and startup scripts determine Node.js, package manager, and profile selection.
Active runtime supervision — the Agent reads incremental logs, inspects running processes, handles recoverable build gates, adjusts, and retries.
Exact, durable evidence — every report is bound to plugin bytes, source commit, DSH version, Node.js version, profile, commands, and logs.
Safe retries and deduplication — interrupted executor work stays pending; an unchanged completed input does not run twice.

The loop

flowchart LR
  Change["Schedule or upstream change"] --> Task["Persist exact task"]
  Task --> Agent["Agent reviews repository evidence"]
  Agent --> Run["Install, run, watch, recover"]
  Run --> Report["Versioned report and logs"]
  Report --> State["Deduplicate or retry"]
  State --> Change

Showing the opening section of the README — the full document lives in the repository以上为 README 开头摘要，完整文档在仓库内 · View the full README on GitHub →在 GitHub 查看完整 README →

渲染基于仓库 MicroMilo/upstream-radar 的 README.md。在 GitHub 查看原文 →