GraphFlow

Name: GraphFlow
Author: Roarpeng

PluginConfirmed pluginCommunity

Roarpeng/GraphFlow · updated yesterday

View source ↗

Installation

dsh plugin --profile web add @roarpeng/graphflow

dsh plugin --profile web add github:Roarpeng/GraphFlow

Plugins in this repository

@roarpeng/graphflowv1.15.4✓
Local-first memory & context harness for coding agents
homepage
https://github.com/Roarpeng/GraphFlow#readme ↗
package.json
package.json
dsh.bundle.patch
cordis.patch.yml

Paths are pinned to commit f72668e55b1d

Overview

Local-first code knowledge graph and context harness for coding agents. MCP + DeepSeek Harness (dsh) plugin.

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 8, 2026, 9:27 AM

High risk

Checked commit: f72668e55b1d
Evidence Score: 78/100
Static risk: High risk
Files scanned: 4
Findings: 4

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance17/20

Compatibility evidence8/20

Security signals3/10

Compatibility confidence: Limited

Install-time scripts (2)

preparehusky || true
postinstallnode scripts/safe-postinstall.cjs

Findings (4)

Highinstall.script
package.jsoninstall-time
```
"prepare": "husky || true"
```

Highinstall.script

package.jsoninstall-time

"postinstall": "node scripts/safe-postinstall.cjs"

Mediumobfuscation.child-process
scripts/safe-postinstall.cjs:5obfuscation
```
const { spawnSync } = require("node:child_process");
```
Mediumobfuscation.child-process
scripts/safe-postinstall.cjs:186obfuscation
```
const result = spawnSync(
```

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0