What it does
DSH插件，将微信私聊消息桥接到DSH，支持文本、图片、文件、音视频的双向传输。目标是在微信端还原DSH的原生体验
Installation
dsh plugin --profile web add dsh-wechatInstall method: npm · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
No critical findings, but warning-level issues were detected (file writes, remote imports, base64 decoding, downloads).
7d8615d7b8ca2026-08-167d8615d7b8caThe scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
• Static heuristic scan: done (15 files)
• Dependency vulnerabilities: requires deep audit (L3+)
• Permission sandboxing: requires runtime testing (L4+)
Scan findings · 6
- warningFilesystem write operationssrc/config-store.ts:54fs.writeFileSync(this.filePath, JSON.stringify(this.overrides, null, 2), "utf-8");
- warningFilesystem write operationssrc/state.ts:59fs.writeFileSync(this.filePath, JSON.stringify(this.state, null, 2), "utf-8");
- warningFilesystem write operationssrc/weixin/auth.ts:40fs.writeFileSync(tokenPath, JSON.stringify(data, null, 2), "utf-8");
- infoMakes network requests (fetch / axios)src/weixin/media.ts:51const res = await fetch(url);
- infoMakes network requests (fetch / axios)src/weixin/media.ts:76const res = await fetch(url, {
- warningFilesystem write operationssrc/weixin/monitor.ts:45fs.writeFileSync(getSyncBufPath(storageDir), JSON.stringify({ get_updates_buf: buf }), "utf-8");
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-15 · activity: Active
• Repo created: 2026-08-16
• Stars: ★ 3 · Forks: 0
• Health: Active — committed within last 30 days
Source
GitHub: github.com/pan17/dsh-wechat