dsh-dep-audit
DeepSeek Harness (dsh) 的依赖供应链卫生审计：peer 范围可解析性、损坏的 dist-tag 检测、过期/缺少许可证/非注册表依赖，以及已安装与声明差异。补充 dsh-poison-guard 和 dsh-plugin-doctor。
Dependency supply-chain hygiene audit for DeepSeek Harness (dsh): peer-range resolvability, broken dist-tag detection, stale/missing-license/non-registry deps, installed-vs-declared drift. Complements dsh-poison-guard and dsh-plugin-doctor.
怎么安装
dsh plugin add dsh-dep-audit 简介
dsh-dep-audit Dependency supply-chain hygiene audit for DeepSeek Harness (dsh) projects and profiles. It answers: **“can I trust the dependency graph of this dsh plugin / profile?”** — peer ranges that resolve to nothing, dist-tags that contradict declared ranges, stale or unlicensed dependencies, non-registry sources, and installed versions that silently drifted from what package.json declares. Complements the rest of the zoahdev security suite: | Tool | Focus | |---|---| | dsh-poison-guard | malware / obfuscation scan of plugin code | | dsh-plugin-doctor | publish readiness: manifest/patch/b…
推荐参考
信息
- 协议
- MIT
- 语言
- TypeScript
- GitHub 星标
- 0
- 月下载
- 314
- 最近更新
- 2026-08-18
- 创建于
- 2026-08-18
基础安全检查
- 检查结果
- 无
- 收录来源
- curated:0xsline/awesome-deepseek-harness
- 主题标签
- deepseek-harness, dependency-audit, dsh-plugin, npm, security, supply-chain
同类推荐
langfuse
langfuse/langfuse
🪢 开源AI工程平台：LLM评估、可观测性、指标、提示管理、游乐场、数据集。与OpenTelemetry、LangChain、OpenAI SDK、LiteLLM等集成。🍊YC W23
loki-mode
asklokesh/claudeskill-loki-mode
多代理自主 SDLC 框架。从规格到部署应用。PRD、GitHub issue、OpenAPI/JSON/YAML 或一行简报。5 个 AI 提供商，8 个质量门。
cc-safety-net
kenryu42/claude-code-safety-net
AI编码代理护栏——一个CLI钩子，在执行前阻止破坏性的git和文件系统命令以及秘密文件访问。支持Amp Code、Antigravity CLI、Claude Code、Codex、Copilot CLI、Cursor、Gemini CLI、Hermes Agent、Kimi Code、OpenClaw、OpenCode和Pi。