dsh-provenance

怎么安装

简介

dsh-provenance English | 中文 **The source you read on GitHub is not necessarily the package you install.** A supply-chain preflight for DeepSeek Harness plugins. It answers a question no other scanner in this ecosystem asks. Existing plugin scanners read the files already on your disk and ask *"does this code do something bad?"*. That is a useful question, but it comes second. The first question is: **Is this code the code the author showed me?** An npm tarball is whatever the publisher uploaded. The registry does not build it from the repository, and nothing forces the two to agree. A publishe…

推荐参考

信息

协议

MIT

语言

TypeScript

GitHub 星标

1

月下载

–

最近更新

2026-08-19

创建于

2026-08-17

链接

基础安全检查

检查结果

无

收录来源

curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin

主题标签

dsh-plugin, dsh-plugin-market, dsh-plugin-verify, dsh-plugins