What it does
VS Code-style workspace file explorer with editable preview for the DSH web GUI
Installation
dsh plugin --profile web add dsh-plugin-workbenchInstall method: npm · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
No critical or warning findings in the automated scan. The result is valid only for the commit hash shown.
5fe5f2e114622026-08-165fe5f2e11462The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
• Static heuristic scan: done (15 files)
• Dependency vulnerabilities: requires deep audit (L3+)
• Permission sandboxing: requires runtime testing (L4+)
Scan findings · 5
- infoReads process.envscripts/patch-layout.mjs:29const dshHome = process.env.DSH_HOME ?? join(homedir(), '.dsh')
- infoReads process.envscripts/verify-alignment.mjs:46const dshHome = process.env.DSH_HOME ?? join(homedir(), '.dsh')
- infoReads process.envscripts/verify-alignment.mjs:51if (process.env.DSH_VERIFY_SKIP === '1') {
- infoUses localStoragesrc/client/store.ts:38const stored = window.localStorage.getItem(WRAP_KEY)
- infoUses localStoragesrc/client/store.ts:176window.localStorage.setItem(WRAP_KEY, wrap ? '1' : '0')
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-16 · activity: Active
• Repo created: 2026-08-16
• Stars: ★ 3 · Forks: 0
• Health: Active — committed within last 30 days
