dsh-install-guard

Name: dsh-install-guard
Author: niaccky

PluginConfirmed pluginCommunity

niaccky/dsh-install-guard · updated 13 days ago

View source ↗

Installation

dsh plugin --profile web add dsh-install-guard

dsh plugin --profile web add ./dsh-install-guard-0.1.0.tgz

dsh plugin --profile web add github:niaccky/dsh-install-guard

Plugins in this repository

dsh-install-guardv0.1.0✓
Guard DeepSeek Harness npm installs with vulnerability, license, bundle-size, and package-health audits.
package.json
package.json
dsh.bundle.patch
cordis.patch.yml
Official core packages (4)
- @deepseek-ai/cordis>=4.0.1 <5shared
- @deepseek-ai/dsh-llm>=0.1.0-rc.7 <0.2.0shared
- @deepseek-ai/dsh-tools>=0.1.0-rc.7 <0.2.0shared
- @deepseek-ai/schemastery^3.18.1private copy

Paths are pinned to commit dd9a67afb959

Overview

npm 安装门禁插件:在 DeepSeek Harness 执行 npm install 前审计漏洞、许可证、体积与包健康度,自动放行/询问/拦截。

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 1, 2026, 5:52 AM

High risk

Checked commit: dd9a67afb959
Evidence Score: 85/100
Static risk: High risk
Files scanned: 2
Findings: 2

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance12/20

Compatibility evidence20/20

Security signals3/10

Compatibility confidence: Medium

Install-time scripts (1)

prepacknpm run check

Findings (2)

Highinstall.script
package.jsoninstall-time
```
"prepack": "npm run check"
```
Mediumdeps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/schemastery": "^3.18.1"
```

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0