dsh-dep-vuln-scan

Name: dsh-dep-vuln-scan
Author: 988hj7tczd-oss

PluginConfirmed pluginCommunity

988hj7tczd-oss/dsh-dep-vuln-scan · updated 8 days ago

View source ↗

Installation

dsh plugin --profile demo add ./dsh-dep-vuln-scan

dsh plugin --profile web add dsh-dep-vuln-scan

dsh plugin --profile web add github:988hj7tczd-oss/dsh-dep-vuln-scan

Plugins in this repository

dsh-dep-vuln-scanv0.1.1✓
Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.
package.json
package.json
dsh.bundle.patch
cordis.yml
Official core packages (4)
- @deepseek-ai/cordis^4.0.1private copy
- @deepseek-ai/dsh-fs0.1.1-rc.2private copy
- @deepseek-ai/dsh-system-prompt0.1.1-rc.2private copy
- @deepseek-ai/dsh-tools0.1.1-rc.2private copy

Paths are pinned to commit db879fc01cd0

Overview

Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle) against the free OSV API and report confirmed dependency vulnerabilities with fix versions

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 1, 2026, 5:50 AM

Medium risk

Checked commit: db879fc01cd0
Evidence Score: 72/100
Static risk: Medium risk
Files scanned: 2
Findings: 4

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance12/20

Compatibility evidence0/20

Security signals10/10

Compatibility confidence: Limited

Findings (4)

Mediumdeps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-system-prompt": "0.1.1-rc.2"
```
Mediumdeps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/cordis": "^4.0.1"
```
Mediumdeps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-fs": "0.1.1-rc.2"
```
Mediumdeps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/dsh-tools": "0.1.1-rc.2"
```

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0