dsh-plugin-trust-center

Name: dsh-plugin-trust-center
Author: TonyWang-hub

PluginConfirmed pluginCommunity

TonyWang-hub/dsh-plugin-trust-center · updated 10 days ago

View source ↗

Installation

dsh plugin --profile work add dsh-plugin-trust-center@0.3.2

dsh plugin --profile work add "$(pwd)/dsh-plugin-trust-center-0.3.2.tgz"

dsh plugin --profile web add dsh-plugin-trust-center

dsh plugin --profile web add github:TonyWang-hub/dsh-plugin-trust-center

Plugins in this repository

dsh-plugin-trust-centerv0.3.2✓
Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.
homepage
https://tonywang-hub.github.io/dsh-plugin-trust-center/ ↗
package.json
package.json
dsh.bundle.patch
cordis.patch.yml
Official core packages (2)
- @deepseek-ai/cordis^4.0.1shared
- @deepseek-ai/dsh-tools0.1.0-rc.6shared
invalid-patch-schemav1.0.0✓
package.json
test/fixtures/invalid-patch-schema/package.json
dsh.bundle.patch
test/fixtures/invalid-patch-schema/cordis.patch.yml
example-bundlev1.0.0✓
package.json
test/fixtures/registry/example-bundle/package.json
dsh.bundle.patch
test/fixtures/registry/example-bundle/cordis.patch.yml
risky-bundlev1.0.0✓
package.json
test/fixtures/risky-bundle/package.json
dsh.bundle.patch
test/fixtures/risky-bundle/cordis.patch.yml
safe-bundlev1.0.0✓
package.json
test/fixtures/safe-bundle/package.json
dsh.bundle.patch
test/fixtures/safe-bundle/cordis.patch.yml
absolute-patch-bundlev1.0.0
package.json
test/fixtures/absolute-patch-bundle/package.json
dsh.bundle.patch
—
client-bundlev1.0.0
package.json
test/fixtures/client-bundle/package.json
dsh.bundle.patch
—
duplicate-clientv1.0.0
package.json
test/fixtures/duplicate-client/package.json
dsh.bundle.patch
—
empty-patch-bundlev1.0.0
package.json
test/fixtures/empty-patch-bundle/package.json
dsh.bundle.patch
—
invalid-bundlev1.0.0
package.json
test/fixtures/invalid-bundle/package.json
dsh.bundle.patch
—
invalid-clientv1.0.0
package.json
test/fixtures/invalid-client/package.json
dsh.bundle.patch
—
invalid-dshv1.0.0
package.json
test/fixtures/invalid-dsh/package.json
dsh.bundle.patch
—
invalid-profilev1.0.0
package.json
test/fixtures/invalid-profile/package.json
dsh.bundle.patch
—
malformed-bundlev1.0.0
package.json
test/fixtures/malformed-bundle/package.json
dsh.bundle.patch
—
missing-client-exportv1.0.0
package.json
test/fixtures/missing-client-export/package.json
dsh.bundle.patch
—
missing-patch-bundlev1.0.0
package.json
test/fixtures/missing-patch-bundle/package.json
dsh.bundle.patch
—

Paths are pinned to commit 5c4fde2ff5b0

Overview

Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 1, 2026, 5:59 AM

High risk

Checked commit: 5c4fde2ff5b0
Evidence Score: 76/100
Static risk: High risk
Files scanned: 25
Findings: 4

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance17/20

Compatibility evidence6/20

Security signals3/10

Compatibility confidence: Unknown

Install-time scripts (3)

prepackpnpm build
test/fixtures/risky-bundle/package.json#installnode install.js
test/fixtures/failing-install-script/package.json#installnode -e "process.exit(99)"

Findings (4)

Highinstall.script
package.jsoninstall-time
```
"prepack": "pnpm build"
```
Highinstall.script
test/fixtures/failing-install-script/package.jsoninstall-time
```
"install": "node -e "process.exit(99)""
```
Highinstall.script
test/fixtures/risky-bundle/package.jsoninstall-time
```
"install": "node install.js"
```

Lownetwork.external-host

package.json:12network

"homepage": "https://tonywang-hub.github.io/dsh-plugin-trust-center/",

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0