upstream-radar/package.json at main · MicroMilo/upstream-radar · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
{
  "name": "upstream-radar",
  "version": "0.32.0",
  "description": "Always-on dependency security monitoring for DeepSeek Harness (DSH) plugins: find exact installed or candidate transitive vulnerable paths and breaking updates, then route evidence to a DSH Agent.",
  "type": "module",
  "license": "Apache-2.0",
  "author": "MicroMilo",
  "homepage": "https://github.com/MicroMilo/upstream-radar#readme",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/MicroMilo/upstream-radar.git"
  },
  "bugs": {
    "url": "https://github.com/MicroMilo/upstream-radar/issues"
  },
  "keywords": [
    "deepseek-harness",
    "deepseek",
    "dsh",
    "dsh-plugin",
    "plugin",
    "plugin-security",
    "cordis",
    "dependency-security",
    "dependency-monitoring",
    "dependency-vulnerabilities",
    "vulnerability-monitoring",
    "breaking-changes",
    "supply-chain",
    "dependency-graph",
    "osv",
    "agent-security",
    "ai-agent",
    "npm"
  ],
  "engines": {
    "node": ">=22"
  },
  "packageManager": "pnpm@11.3.0",
  "publishConfig": {
    "access": "public"
  },
  "bin": {
    "upstream-radar": "dist/src/cli.js"
  },
  "exports": {
    ".": {
      "types": "./dist/src/index.d.ts",
      "import": "./dist/src/index.js"
    },
    "./dsh": {
      "types": "./dist/src/dsh-plugin.d.ts",
      "import": "./dist/src/dsh-plugin.js"
    },
    "./cordis.patch.yml": {
      "default": "./cordis.patch.yml"
    }
  },
  "files": [
    "dist/src",
    "schemas",
    "cordis.patch.yml",
    "docs/assets/upstream-radar-hero.jpg",
    "docs/assets/upstream-radar-hero-mobile.jpg",
    "README.md",
    "docs/README.zh-CN.md",
    "LICENSE"
  ],
  "scripts": {
    "build": "tsc -p tsconfig.json",
    "cli": "node dist/src/cli.js",
    "check": "tsc -p tsconfig.json --noEmit",
    "scan:self": "pnpm run build && node dist/src/cli.js scan . --fail-on block",
    "showcase": "pnpm run build && node scripts/radar-showcase.mjs",
    "showcase:reports": "pnpm run build && node scripts/radar-showcase.mjs --write-reports",
    "showcase:admission": "pnpm run build && node scripts/showcase.mjs",
    "showcase:admission:reports": "pnpm run build && node scripts/showcase.mjs --write-reports",
    "showcase:radar": "pnpm run build && node scripts/radar-showcase.mjs",
    "showcase:radar:reports": "pnpm run build && node scripts/radar-showcase.mjs --write-reports",
    "benchmark:compatibility": "pnpm run build && node dist/src/cli.js benchmark compatibility",
    "showcase:dsh-probe": "pnpm run build && node scripts/dsh-load-probe-showcase.mjs",
    "try:consumer": "node scripts/consumer-smoke.mjs",
    "try:dsh": "pnpm run build && node scripts/dsh-headless-showcase.mjs",
    "try:dsh:live": "pnpm run build && node scripts/dsh-headless-showcase.mjs --live-feeds",
    "try:dsh:report": "pnpm run build && node scripts/dsh-headless-showcase.mjs --write-report",
    "prepublishOnly": "pnpm test",
    "test": "pnpm run build && node --test dist/test/*.test.js"
  },
  "dsh": {
    "bundle": {
      "patch": "./cordis.patch.yml"
    }
  },
  "devDependencies": {
    "@types/node": "26.2.0",
    "typescript": "7.0.2"
  }
}