Static repository check
- Checked commit
4bf3ea5da6af- Evidence Score
- 52/100
- Static risk
- High risk
- Files scanned
- 2
- Findings
- 21
Evidence breakdown
Source provenance20/25
Install documentation15/25
Maintenance12/20
Compatibility evidence5/20
Security signals0/10
Compatibility confidence: Limited
Install-time scripts (1)
preparenpm run build
Findings (21)
- High
install.scriptpackage.jsoninstall-time"prepare": "npm run build" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-code-runtime": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-compaction": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-fs": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-invariants": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-mcp-client": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-output-retention": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-sandbox": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-scope": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-session-telemetry": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-session-title-llm": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-shell": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-spill": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-subagent-in-process-driver": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-subprocess": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-timeout": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-workflow": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/cordis-plugin-group": "^1.0.1" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-atomic-write": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-bash-local": "^0.1.0-rc.7"
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0