dsh-scope

Context visibility + GitHub-style usage heatmap for DeepSeek Harness (dsh) — Codex-style /context lens + 53-week contribution graph

PluginDeveloperGitHub integrationMemory

Verification

L2 · Structured

Security

Low

Health

Active

Trust

Silver

What it does

Context visibility + GitHub-style usage heatmap for DeepSeek Harness (dsh) — Codex-style /context lens + 53-week contribution graph

dsh plugin --profile web add dsh-scope

Install method: npm · not yet tested in container (L3+)

DSH Version	Status
not stated	Declared — not tested

Automated static scan, not manual review.

DSH.SOPASSEDSCAN12 FILES

c1ff24

Security reviewAutomated review · daily

PASSED

No critical or warning findings in the automated scan. The result is valid only for the commit hash shown.

0 critical·0 warning·7 info·12 files scanned

Version binding

scanned commitc1ff24c541b72026-08-16

latest commit—

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Low0 critical · 0 warning · 7 info

• Static heuristic scan: done (12 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

infoMakes network requests (fetch / axios)src/client/UsageHeatmap.jsx:107
fetch(DAYS_PATH, { headers: { accept: 'application/json' } })
infoReads process.envsrc/index.js:73
const home = process.env.DSH_HOME ?? join(homedir(), '.dsh')
infoHardcoded IP addresssrc/index.js:40
const LOOPBACK_ADDRESSES = new Set(['127.0.0.1', '::1', '::ffff:127.0.0.1'])
infoHardcoded IP addresssrc/index.js:41
const LOOPBACK_HOSTNAMES = new Set(['localhost', '127.0.0.1', '[::1]'])
infoReads process.envtsdown.config.mjs:66
'process.env.NODE_ENV': JSON.stringify(process.env.NODE_ENV ?? 'production'),
infoReads process.envtsdown.config.mjs:67
'import.meta.env.MODE': JSON.stringify(process.env.NODE_ENV ?? 'production'),
infoReads process.envtsdown.config.mjs:68
'import.meta.env': JSON.stringify({ MODE: process.env.NODE_ENV ?? 'production' }),

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Last commit 2026-08-16 · activity: Active

• Repo created: 2026-08-16

• Stars: ★ 1 · Forks: 0

• Health: Active — committed within last 30 days