Install verification: Ecosystem plugin: installs via dsh plugin add but declares no dsh.bundle and mounts no plugin capability — the L1-L5 install ladder does not rate it; the security scan still runs.Install verification details →
What it doesAI
Comprehensive DSH docs knowledge base mirroring official docs, 780 community discussions, source analyses, and plugin framework guides.
- Mirrors full official docs (85 files / 12 subdirectories)
- Indexes 780 community Discussion posts, bugs, and plugin repos
- Adds 12 source-analysis articles plus plugin dev guides
Capability tags are AI-inferred or rule-extracted from the README (see badge) — vocabulary-limited, not install-verified. AI = inferred; README = literal keyword from the readme.
Installation
dsh plugin --profile web add github:drscrewdriver/dsh-docs-deliverablesInstall method: GitHub · runtime test inconclusive (L5 unknown)
Verification & Compatibility○ Ecosystem plugin
Grouped by plugin version: each card lists the dsh versions actually tested against that artifact version and their install verdicts (L5 wins). Untested combinations are omitted — absence means untested, never assumed compatible. L1–L3 are a plugin-level static archive (independent of the dsh version — the same verdict on every dsh row): they sit in each row's level grid next to L4/L5, marked "static", while their evidence is stored once per plugin inside that row's "checks & evidence" instead of being duplicated per version.
External credentials (plugin-level): none detected
package manifest not collected — the declared range is unknown.
| plugin \ dsh | dsh 0.2.1-rc.2 current | dsh 0.2.1-alpha.4 | dsh 0.2.1-alpha.2 | dsh 0.2.0-rc.2 | dsh 0.2.0-rc.1 |
|---|---|---|---|---|---|
| 213b45 | · | · | · | · | · |
| 18ef7b | ○ | ○ | ○ | ○ | ○ |
213b45local2026-09-10
Ecosystem plugin: installs via dsh plugin add but declares no dsh.bundle and mounts no plugin capability — its level reads L5 · Ecosystem plugin.
18ef7bgithub○ 14 ecosystem plugin2026-10-19
https://github.com/drscrewdriver/dsh-docs-deliverables
○dsh 0.2.1-rc.2current2026-10-19Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.1-rc.2
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.2.1-rc.2 · profile: l4-sandbox
Issued: 2026-10-19 · expires: 2026-10-26
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.2.1-alpha.42026-10-16Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.4
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.2.1-alpha.4 · profile: l4-sandbox
Issued: 2026-10-16 · expires: 2026-10-23
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.2.1-alpha.22026-10-11Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.2
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.2.1-alpha.2 · profile: l4-sandbox
Issued: 2026-10-11 · expires: 2026-10-18
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.2.0-rc.22026-10-08Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.0-rc.2
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.2.0-rc.2 · profile: l4-sandbox
Issued: 2026-10-08 · expires: 2026-10-15
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.2.0-rc.12026-09-29Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.0-rc.1
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.2.0-rc.1 · profile: l4-sandbox
Issued: 2026-09-29 · expires: 2026-10-06
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.7-rc.22026-09-28Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.7-rc.2
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.1.7-rc.2 · profile: l3-fullscan
Issued: 2026-09-28 · expires: 2026-10-05
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.7-rc.12026-09-23Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.7-rc.1
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.1.7-rc.1 · profile: l4-sandbox
Issued: 2026-09-23 · expires: 2026-09-30
View checks & evidence
This level was not executed in this scan.
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.7-alpha.22026-09-23Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.7-alpha.2
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.1.7-alpha.2 · profile: l4-sandbox
Issued: 2026-09-23 · expires: 2026-09-30
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.6-alpha.22026-09-20Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.6-alpha.2
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.1.6-alpha.2 · profile: l3-fullscan
Issued: 2026-09-20 · expires: 2026-09-27
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.6-alpha.12026-09-17Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.6-alpha.1
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.1.6-alpha.1 · profile: l4-sandbox
Issued: 2026-09-17 · expires: 2026-09-24
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.5-rc.22026-09-14Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.5-rc.2
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.1.5-rc.2 · profile: l3-fullscan
Issued: 2026-09-14 · expires: 2026-09-21
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.5-rc.12026-09-10Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.5-rc.1
- • Plugin artifact: github · github:drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.1.5-rc.1 · profile: l5-web-smoke
Issued: 2026-09-10 · expires: 2026-12-09
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.3-alpha.22026-09-10Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.3-alpha.2
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dsh0.1.3-alpha.2 · profile: l4-sandbox
Issued: 2026-09-10 · expires: 2026-09-17
View checks & evidence
This level was not executed in this scan.
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○prehistory2026-10-04Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: unknown
- • Plugin artifact: github · https://github.com/drscrewdriver/dsh-docs-deliverables (version unstated)
ID: dsh-docs-deliverables@18ef7b@dshunknown · profile: l4-sandbox
Issued: 2026-10-04 · expires: 2026-10-11
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
Author badges
Embed the official badges in your README to showcase security & install-test status:
`[](https://www.dsh.so/artifact/dsh-docs-deliverables/)`Security Report
Two automated layers, neither a manual review: a static scan (per-plugin rule checks) and a model-driven dynamic security audit that covers only the subset static-flagged at warn or above and never executes plugin code.
Static low; dynamic low (authoritative when present) → overall low.
—ba88b0139e83git2026-10-25ba88b0139e83same versionclean · gitVet is an AST static scan (npm artifact or git source).
show static findings (6)
- criticalshellExec · shell
source-analysis/v0.2.1-alpha.3/gapdef-scan.mjs:26const diff = execSync(`git diff -U0 --no-color ${a} ${b} -- packages apps`, { - warningnetIp · network
discussion-issues/_tools/canon-new-families.cjs:21const BASE = 'http://192.168.100.242:8200'; - warningfsWrite · files
discussion-issues/_tools/canon-new-families.cjs:115fs.writeFileSync(OUT, JSON.stringify({ - warningnetIp · network
discussion-issues/_tools/probe-throughput.cjs:9const BASE = 'http://192.168.100.242:8200'; - warningfsWrite · files
discussion-issues/_tools/trend-analysis.cjs:111fs.writeFileSync(path.join(OUT_DIR, 'trend-data.json'), JSON.stringify(out, null, 2), 'utf-8'); - warningfsWrite · files
dsh-discussion-summary/incremental-2026-09-12/_tools/analyze-new.cjs:99fs.writeFileSync(
show 2 audit findings
- lowDev CLI tools POST corpus text to a hardcoded private LAN endpoint over plain HTTP
discussion-issues/_tools/canon-new-families.cjs:21Three manually run helper scripts (canon-new-families.cjs, probe-throughput.cjs, and the classify pass) send discussion titles/bodies to a fixed unauthenticated HTTP endpoint. This is the documented purpose of the tools and they are not loaded by DSH, but the endpoint and model name are baked in rather than configurable, so corpus content leaves the machine unencrypted and the target cannot be changed without editing source.
- lowAnalysis scripts read and write absolute paths outside the repository
dsh-discussion-summary/incremental-2026-09-12/_tools/analyze-new.cjs:18The tooling assumes a fixed Windows directory outside the repo for both input and checkpoint state; run elsewhere it silently reads nothing or writes results into an unintended location. Not attacker-controlled (no user input reaches the path), so exposure is limited to the developer's own machine.
Docs/analysis toolkit plus a client-only plugin template; the runtime-loaded code is an empty Node entry and a locale dictionary. The flagged execSync uses only constant git args, so it is not injectable.
Rule (2026-10-24): when a dynamic conclusion exists it is authoritative (it may raise or lower the level); without one, the static/vet fused tier applies. The audit never writes the exemption list (exemptions are manual only); a wrong conclusion is withdrawn by human review and the tier falls back to static/vet.
Disclaimer: the static scan and the dynamic security audit are both automated analysis, not a security guarantee. Always review what you install.
Activity
Last commit 2026-10-23 · activity: Active
• Repo created: 2026-09-08
• Stars: ★ 3 · Forks: 0
• Health: Active — committed within last 30 days
Source
Author README
View on GitHub ↗The author's original README from the repository — fetched live, unedited (the English page loads the default README).
