What it doesAI
Displays DeepSeek Harness and mounted plugin package versions inside the dsh web UI.
- Shows running DeepSeek Harness version
- Lists every mounted plugin's package version
- Displays info in dsh web UI
AI-generated from the repo README — for reference only.
Installation
dsh plugin --profile web add github:kristol07/dsh-version-inventory#v0.2.0security scan passed · source release v0.2.0
Install method: GitHub · sandbox install verified (L4) · L5 pending
Verification & Compatibility
Records are archived per dsh version under test: each card shows the newest real L1–L5 verdicts on that version (static levels included; fall back to all-time newest with a carried note when absent).
External credentials (plugin-level): none detected
dsh 0.1.3-alpha.1current2026-09-07L5 pending
- • Node.js: v24.14.0
- • DSH: 0.1.3-alpha.1
- • Plugin artifact: github · https://github.com/kristol07/dsh-version-inventory (version unstated)
ID: dsh-version-inventory@850495@dsh0.1.3-alpha.1 · profile: l4-sandbox
Issued: 2026-09-07 · expires: 2026-09-14
View checks & evidence
This level was not executed in this scan.
Author badges
Embed the official badges in your README to showcase security & install-test status:
`[](https://www.dsh.so/artifact/dsh-version-inventory/)``[](https://www.dsh.so/artifact/dsh-version-inventory/)`Security Report
Automated static scan, not manual review.
Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).
0.2.0dsh manifestb1f10d88f3592026-09-07b1f10d88f359suspicious · npmVet is an AST static scan (npm artifact or git source).
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
Risk details
| Risk | Rule | Location | Description |
|---|---|---|---|
| high | R10 | package.json | install 钩子:package.json scripts.prepare(安装期任意代码执行面) |
Activity
Last commit 2026-09-06 · activity: Active
• Repo created: 2026-09-06
• Stars: ★ 0 · Forks: 0
• Health: Active — committed within last 30 days
Source
Author README
View on GitHub ↗The author's original README.md from the repository — fetched live, unedited.
