Community directory previewDeepSeek Harness is in developer preview
DD

dsh-depguard

PluginConfirmed pluginCommunity

DeLightor/dsh-depguard · updated 16 days ago

Installation

dsh plugin --profile web add dsh-depguard
dsh plugin --profile web add github:DeLightor/dsh-depguard
dsh plugin --profile web add ./dsh-depguard

Plugins in this repository

  • dsh-depguardv0.1.0

    DeepSeek Harness plugin: predict (pre-install) and detect (post-install) duplicate @deepseek-ai/dsh-* copies, version drift, and vendored core services to prevent Symbol-key crashes like "Cannot read properties of undefined (reading 'prepare')".

    package.json
    package.json
    dsh.bundle.patch
    cordis.patch.yml
    Official core packages (2)
    • @deepseek-ai/cordis^4.0.1shared
    • @deepseek-ai/dsh-tools^0.1.0-rc.6shared
  • bad-pluginv1.0.0
    dsh.bundle.patch
    Official core packages (1)
    • @deepseek-ai/dsh-tools^0.0.1-rc.1private copy

Paths are pinned to commit 3f2e9814a5fa

Overview

根因是 discussion 1337:@deepseek-ai/dsh-tools 等核心包出现第二份物理副本时,JS Symbol 键(每次求值都不同)会让 ctx.tools[scheduler] 变 undefined,一次工具调度就崩,还会在会话里留下孤儿 toolcalls,之后每轮 400 INVALIDREQUEST 死锁。

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Medium risk
Checked commit
3f2e9814a5fa
Evidence Score
81/100
Static risk
Medium risk
Files scanned
7
Findings
1

Evidence breakdown

Source provenance25/25
Install documentation25/25
Maintenance12/20
Compatibility evidence5/20
Security signals10/10

Compatibility confidence: Limited

Findings (1)
Not run
  • Dependency advisory database scan
  • Installation execution test
  • Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0