社区目录预览DeepSeek Harness 仍处于开发者预览阶段
DA

dsh-auth-plugin

插件已确认插件社区发布

v1xingyue/dsh-auth-plugin · 14 天前更新

安装方式

dsh plugin --profile web add @noble/curves
dsh plugin --profile web add dsh-auth-plugin
dsh plugin --profile web add file:/path/to/your-org-dsh-auth-plugin-1.6.0.tgz
dsh plugin --profile web add github:v1xingyue/dsh-auth-plugin

仓库内包含的插件

  • dsh-auth-pluginv1.8.0

    DSH Web 用户授权插件 — 用户名密码 + 通用 OAuth 2.0(内置 GitHub/Google/Discord 等模板)+ Solana/EVM 钱包登录。零依赖核心,纯配置接入

    package.json
    package.json
    dsh.bundle.patch
    cordis.patch.yml
    官方核心包 (2)
    • @deepseek-ai/cordis^1.0.0共享
    • @deepseek-ai/schemastery^1.0.0共享

路径固定于提交 dec45bf6132e

概览

DSH 用户授权插件:密码 + 通用 OAuth 2.0(内置 GitHub/Google/Discord 模板)+ Solana/EVM 钱包登录。零依赖核心,纯配置接入

仓库检查结果

结果绑定到所列 commit,仅涵盖本站实际执行的静态检查。证据分衡量可复核信息的完整度,不是兼容性百分比,也不构成安全保证。

仓库静态检查

高风险
检查 Commit
dec45bf6132e
证据分
76/100
静态风险
高风险
扫描文件
3
检查发现
19

证据分项

来源溯源25/25
安装文档25/25
维护状况12/20
兼容性证据11/20
安全信号3/10

兼容性置信度: 有限

安装期脚本 (1)
  • prepacknode --check lib/index.js
检查发现 (19)
  • install.script
    package.jsoninstall-time
    "prepack": "node --check lib/index.js"
  • credentials.env-secret
    lib/index.js:786credential-access
    const secret = config.secret || process.env.DSH_AUTH_SECRET || randomBytes(32).toString("hex");
  • network.external-host
    lib/index.js:182network
    authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth",
  • network.external-host
    lib/index.js:183network
    tokenUrl: "https://oauth2.googleapis.com/token",
  • network.external-host
    lib/index.js:184network
    userInfoUrl: "https://www.googleapis.com/oauth2/v3/userinfo",
  • network.external-host
    lib/index.js:192network
    authorizeUrl: "https://discord.com/oauth2/authorize",
  • network.external-host
    lib/index.js:193network
    tokenUrl: "https://discord.com/api/oauth2/token",
  • network.external-host
    lib/index.js:194network
    userInfoUrl: "https://discord.com/api/users/@me",
  • network.external-host
    lib/index.js:202network
    authorizeUrl: "https://gitlab.com/oauth/authorize",
  • network.external-host
    lib/index.js:203network
    tokenUrl: "https://gitlab.com/oauth/token",
  • network.external-host
    lib/index.js:204network
    userInfoUrl: "https://gitlab.com/api/v4/user",
  • network.external-host
    lib/index.js:212network
    authorizeUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
  • network.external-host
    lib/index.js:213network
    tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
  • network.external-host
    lib/index.js:214network
    userInfoUrl: "https://graph.microsoft.com/v1.0/me",
  • network.external-host
    lib/index.js:223network
    authorizeUrl: "https://bitbucket.org/site/oauth2/authorize",
  • network.external-host
    lib/index.js:224network
    tokenUrl: "https://bitbucket.org/site/oauth2/access_token",
  • network.external-host
    lib/index.js:225network
    userInfoUrl: "https://api.bitbucket.org/2.0/user",
  • network.external-host
    lib/index.js:568network
    return new URL(req.url ?? "/", "http://dsh.local").pathname;
  • network.external-host
    lib/index.js:1161network
    const url = new URL(req.url, "http://dsh.local");
未执行的检查
  • 依赖漏洞数据库扫描
  • 实际安装测试
  • 运行时行为验证

扫描器 1.0.0 · 评分器 1.0.0