New: npm_downloads_last_day and npm_downloads_range (per-day downloads between two dates).

Probed and rejected this round: Stack Exchange /search/answers (HTTP 400), crates.io dependencies endpoint (unreachable from this network), dev.to podcast episodes (unreachable).

Verification: 44 unit tests; real-network smoke for all 37 v2.3.0..v2.8.0 tools (PASS except documented SKIPs: Reddit x2, go_module_latest); CI installs the bundle into a fresh dsh profile and boots dsh web.

New flagship composite tool: github_weekly_digest — one call answers 'what happened this week in owner/repo' (releases + merged PRs + new issues + commits, configurable look-back window).

Real-API finding: repositories with pull requests disabled (deepseek-ai/deepseek-harness itself!) made the digest 404 entirely. Fixed with per-surface 404 tolerance + regression test.

Verification: 43 unit tests; live digest run against the real GitHub API returned 30 real commits; CI installs the bundle into a fresh dsh profile and boots dsh web.

New: go_module_latest (official Go module proxy), crates_crate_versions (per-version downloads + yank status), gitee_repo_contributors, gitlab_project_tags, so_related_tags.

Probed and rejected: Maven Central (repeated timeouts), Hugging Face /api/tags (401) — not shipped because they would fail in real use.

Verification: 41 unit tests; real-network smoke for all 35 v2.3.0..v2.6.0 tools (PASS except Reddit x2 + go_module_latest SKIP, each documented — proxy.golang.org is intermittently unreachable from this network while urllib probes succeed); CI installs the bundle into a fresh dsh profile and boots dsh web.

Two new ecosystems:

• rubygems_search / rubygems_gem (real RubyGems API)
• nuget_search (real NuGet search service)

Also: Bitbucket Cloud was probed and deliberately NOT shipped — its public API now returns 404/410 for anonymous access, another 'documented as public but actually closed' trap caught by real-API verification.

Verification: 40 unit tests; real-network smoke for all 30 v2.3.0+v2.4.0+v2.5.0 tools (28 PASS, 2 Reddit SKIP on cloud-blocked networks); CI installs the bundle into a fresh dsh profile and boots dsh web.

Two quality fixes found by running the v2.4.0 tools against real data:

• so_question_answers: StackExchange answers don't always include a link field → now falls back to a stable https://stackoverflow.com/a/{answerId} URL
• gitee_repo_issues: Gitee issues don't expose a numeric number → now surfaces the real issue ident (e.g. IK8TOP) from html_url

39/39 unit tests pass; released with the same CI verification (fresh profile install + dsh web boot).

New tools: gitlab_project_issues / gitlab_project_merge_requests / gitlab_project_commits / gitlab_project_branches, gitee_repo_releases / gitee_repo_issues / gitee_repo_commits, so_question_answers / so_top_tags, reddit_subreddit_rising / reddit_subreddit_controversial, devto_articles / devto_article / devto_user, npm_package_dependencies.

Fixes found by real-API verification:

• SO tools now send the required site=stackoverflow param (previously broken in real use)
• Reddit children unwrap now handles the real {data:{children:[{data}]}} shape
• limit is enforced locally (GitHub/GitLab/StackExchange ignore the query param and previously returned full pages)

Verification: 39 unit tests; real-network smoke for all 27 v2.3.0+v2.4.0 tools (25 PASS, 2 Reddit SKIP on cloud-blocked networks); CI installs the bundle into a fresh dsh profile and boots dsh web.

New catalog tools: github_repo_releases, github_repo_issues (PR-filtered), github_repo_pulls, github_user_repositories, github_user_social_accounts, github_repo_contributors, github_repo_subscribers, github_repo_collaborators (permission-aware), github_repo_git_refs, github_repo_punch_card, github_repo_security_advisories, github_search_repositories.

Verification: 35 unit tests passed; every new tool passed a real-network smoke against the public GitHub API; CI installs the bundle into a fresh dsh profile and boots it.

New: commit/issue/PR comments by id, release assets by id, deployment statuses, Pages builds, contributor stats, issue timelines, content/file reads, commits by author/path, Show/Job/Best HN stories, Stack Overflow users, Reddit users, crate owners. 30/30 tests, boot verified on dsh 0.1.0-rc.6.

Adds GitLab (search, project, group projects) and Gitee (search, repo, user repos). Now 150+ tools across GitHub, GitLab, Gitee, npm, PyPI, crates.io, Docker Hub, Hugging Face, Hacker News, Stack Overflow, Reddit, plus dsh ecosystem stats. 29/29 tests, boot verified on dsh 0.1.0-rc.6.

The most comprehensive developer-intelligence integration for DeepSeek Harness: GitHub (100+ tools) + npm + PyPI + crates.io + Docker Hub + Hugging Face + Hacker News + Stack Overflow + Reddit + dsh ecosystem stats. 27/27 tests, boot verified on dsh 0.1.0-rc.6.