What it doesAI
A DeepSeek Harness plugin that polls GitHub repos for open PRs and automatically posts code review comments.
- Polls configured GitHub repos for open PRs
- Automatically posts COMMENT reviews on PRs
- TypeScript port of LingoBridge GitHub reviewer
AI-generated from the repo README — for reference only.
Installation
dsh plugin --profile web add dsh-github-reviewerInstall method: npm · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
No critical or warning findings in the automated scan. The result is valid only for the commit hash shown.
0.1.0-rc10dsh manifestde14db52ac052026-08-20de14db52ac05The scan result is valid for the scanned commit. New commits within 7 days are tolerated (the rating still counts); after 7 days without a rescan the badge shows outdated.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
vet verdict: vet: clean · score 94
- R2 · info [likely] — require()（客户端加载器 factory 形参注入，DSH bundle 标准写法）
- R2 · info [likely] — require()（客户端加载器 factory 形参注入，DSH bundle 标准写法）
- R3 · info [certain] — 只读 process 成员（能力触达面）：process.env
- R9 · medium [likely] — 正则嵌套量词（ReDoS 风险：(a+)+ 类指数回溯）
- R10 · info [heuristic] — 依赖清单：55 项（@modelcontextprotocol/sdk, zod, @deepseek-ai/cordis, @deepseek-ai/dsh-agent, @deepseek-ai/dsh-agent-default-model, @deepseek-ai/dsh-agent-loop, @deepseek-ai/dsh-api-remotes, @deepseek-ai/dsh-client-connection, @deepseek-ai/dsh-client-locale, @deepseek-ai/dsh-client-runtime, @deepseek-ai/dsh-client-ui-settings, @deepseek-ai/dsh-client-ui-settings-plugins, @deepseek-ai/dsh-client-ui-slots, @deepseek-ai/dsh-llm, @deepseek-ai/dsh-scope, @deepseek-ai/dsh-session, @deepseek-ai/dsh-session-persistence, @deepseek-ai/dsh-settings, @deepseek-ai/dsh-storage, @deepseek-ai/dsh-storage-domain, @deepseek-ai/dsh-system-prompt, @deepseek-ai/dsh-timeout, @deepseek-ai/dsh-tools, @deepseek-ai/dsh-typert-registry, @deepseek-ai/dsh-workspace, @deepseek-ai/schemastery, @types/node, @types/react, @vitest/coverage-v8, oxlint…，供 LLM 审计供应链；已知漏洞核对见后续 OSV 精确版本查询（网络失败静默降级））
vet is advisory and does not change dsh’s four-tier level.
• Static heuristic scan: done (15 files)
• Dependency vulnerabilities: requires deep audit (L3+)
• Permission sandboxing: requires runtime testing (L4+)
Activity
Last commit 2026-08-20 · activity: Active
• Repo created: 2026-08-20
• Stars: ★ 1 · Forks: 0
• Health: Active — committed within last 30 days