Static repository check
- Checked commit
4f7a2ce25e87- Evidence Score
- 60/100
- Static risk
- High risk
- Files scanned
- 2
- Findings
- 25
Evidence breakdown
Source provenance25/25
Install documentation18/25
Maintenance12/20
Compatibility evidence8/20
Security signals3/10
Compatibility confidence: Limited
Install-time scripts (1)
postinstallpatch-package
Findings (25)
- High
install.scriptpackage.jsoninstall-time"postinstall": "patch-package" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-sandbox": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-scope": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-session-telemetry": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-session-title-llm": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-shell": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-spill": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-subagent-in-process-driver": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-subprocess": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-timeout": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-workflow": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-atomic-write": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-cmdline": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-code-runtime": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-compaction": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-fs": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-home-paths": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-invariants": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-launch-environment": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-output-retention": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/cordis-plugin-group": "^1.0.1" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-anonymous-user-id": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-app-boot": "^0.1.0-rc.7" - Medium
deps.core-package-installedpackage.jsondependencies"@deepseek-ai/dsh-bash-local": "^0.1.0-rc.7"
Not run
- Dependency advisory database scan
- Installation execution test
- Runtime behavior verification
Scanner 1.0.0 · Scorer 1.0.0