dsh-dep-audit
Dependency supply-chain hygiene audit for DeepSeek Harness (dsh): peer-range resolvability, broken dist-tag detection, stale/missing-license/non-registry deps, installed-vs-declared drift. Complements dsh-poison-guard and dsh-plugin-doctor.
DeepSeek Harness (dsh) 的依赖供应链卫生审计:peer 范围可解析性、损坏的 dist-tag 检测、过期/缺少许可证/非注册表依赖,以及已安装与声明差异。补充 dsh-poison-guard 和 dsh-plugin-doctor。
How to install
dsh plugin add dsh-dep-audit About
dsh-dep-audit Dependency supply-chain hygiene audit for DeepSeek Harness (dsh) projects and profiles. It answers: **“can I trust the dependency graph of this dsh plugin / profile?”** — peer ranges that resolve to nothing, dist-tags that contradict declared ranges, stale or unlicensed dependencies, non-registry sources, and installed versions that silently drifted from what package.json declares. Complements the rest of the zoahdev security suite: | Tool | Focus | |---|---| | dsh-poison-guard | malware / obfuscation scan of plugin code | | dsh-plugin-doctor | publish readiness: manifest/patch/b…
Recommendation signals
Meta
- License
- MIT
- Language
- TypeScript
- GitHub stars
- 0
- mo. downloads
- 314
- Last push
- 2026-08-18
- Created
- 2026-08-18
Links
Basic safety check
- Findings
- None
- Sources
- curated:0xsline/awesome-deepseek-harness
- Topics
- deepseek-harness, dependency-audit, dsh-plugin, npm, security, supply-chain
Related plugins
langfuse
langfuse/langfuse
🪢 Open source AI engineering platform: LLM evals, observability, metrics, prompt management, playground, datasets. Integrates with OpenTelemetry, LangChain, OpenAI SDK, LiteLLM, and more. 🍊YC W23
claude-code-templates
davila7/claude-code-templates
CLI tool for configuring and monitoring Claude Code
loki-mode
asklokesh/claudeskill-loki-mode
Multi-agent autonomous SDLC framework. Spec to deployed app. PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief. 5 AI providers, 8 quality gates.
cc-safety-net
kenryu42/claude-code-safety-net
An AI coding agent guardrail — a CLI hook that blocks destructive git and filesystem commands and secret file access before they execute. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Copilot CLI, Cursor, Gemini CLI, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.