dsh-dep-audit

Name: dsh-dep-audit
Author: zoahdev

PluginConfirmed pluginCommunity

zoahdev/dsh-dep-audit · updated 14 days ago

View source ↗

Installation

dsh plugin add dsh-dep-audit

dsh plugin --profile web add github:zoahdev/dsh-dep-audit

Plugins in this repository

dsh-dep-auditv0.1.1✓
Dependency supply-chain hygiene audit for DeepSeek Harness (dsh) projects and profiles: peer-range resolvability, broken dist-tag detection, stale/missing-license/non-registry dependencies, and installed-vs-declared drift. Complements dsh-poison-guard (malware scan) and dsh-plugin-doctor (publish readiness).
homepage
https://github.com/zoahdev/dsh-dep-audit ↗
package.json
package.json
dsh.bundle.patch
cordis.patch.yml
Official core packages (3)
- @deepseek-ai/cordis^4.0.1shared
- @deepseek-ai/dsh-tools^0.1.0-rc.6shared
- @deepseek-ai/schemastery^3.18.1private copy

Paths are pinned to commit c9dd90b1bbe0

Overview

Dependency supply-chain hygiene audit for DeepSeek Harness (dsh): peer-range resolvability, broken dist-tag detection, stale/missing-license/non-registry deps, installed-vs-declared drift. Complements dsh-poison-guard and dsh-plugin-doctor.

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 1, 2026, 5:55 AM

High risk

Checked commit: c9dd90b1bbe0
Evidence Score: 82/100
Static risk: High risk
Files scanned: 2
Findings: 2

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance17/20

Compatibility evidence12/20

Security signals3/10

Compatibility confidence: Limited

Install-time scripts (1)

preparepnpm run build

Findings (2)

Highinstall.script
package.jsoninstall-time
```
"prepare": "pnpm run build"
```
Mediumdeps.core-package-installed
package.jsondependencies
```
"@deepseek-ai/schemastery": "^3.18.1"
```

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0