dsh-dep-audit
dsh 项目与 profile 的依赖供应链卫生审计：peer 范围可解析性、坏 dist-tag 检测（#2763 类）、过期/缺许可证/非注册表来源依赖与安装版本漂移——CLI + agent 可调用 dep_audit 工具。
Dependency supply-chain hygiene audit for dsh projects and profiles: peer-range resolvability, broken dist-tag detection (#2763 class), stale / missing-license / non-registry dependencies, and installed-vs-declared drift — CLI plus an agent-callable dep_audit tool.
怎么安装
dsh plugin add dsh-dep-audit 简介
dsh-dep-audit Dependency supply-chain hygiene audit for DeepSeek Harness (dsh) projects and profiles. It answers: **“can I trust the dependency graph of this dsh plugin / profile?”** — peer ranges that resolve to nothing, dist-tags that contradict declared ranges, stale or unlicensed dependencies, non-registry sources, and installed versions that silently drifted from what package.json declares. Complements the rest of the zoahdev security suite: | Tool | Focus | |---|---| | dsh-poison-guard | malware / obfuscation scan of plugin code | | dsh-plugin-doctor | publish readiness: manifest/patch/b…
推荐参考
信息
- 协议
- MIT
- 语言
- TypeScript
- GitHub 星标
- 1
- 月下载
- 539
- 最近更新
- 2026-08-18
- 创建于
- 2026-08-18
基础安全检查
- 检查结果
- 无
- 收录来源
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin, curated:0xsline/awesome-deepseek-harness
- 主题标签
- deepseek-harness, dependency-audit, dsh-plugin, npm, security, supply-chain
同类推荐
langfuse
langfuse/langfuse
🪢 开源AI工程平台：LLM评估、可观测性、指标、提示管理、游乐场、数据集。与OpenTelemetry、LangChain、OpenAI SDK、LiteLLM等集成。🍊YC W23