Install Test Data API
Single-plugin sandbox install-test (verification level L4) level queries. One plugin per request — there is deliberately no bulk snapshot endpoint.
| URL | Description | Update |
|---|---|---|
/data/install/<id>.json | Single-plugin install test (L4) result — state machine passed / failed / unknown / untested with evidence metadata | rebuilt on each site build (records are append-only) |
/data/install.schema.json | JSON Schema for the install endpoint | append-only updates |
JSON endpoints allow cross-origin reads: Access-Control-Allow-Origin: *. No API key or registration is required.
Sandbox install test (verification level L4) per plugin, derived at build time from append-only verification records. The newest record that actually tested L4 wins — a later focused run that left L4 as not-tested never masks an earlier verdict.
| State | Meaning |
|---|---|
passed | The install command ran successfully inside the isolated sandbox, with no dependency errors |
failed | The sandboxed install ran and failed — a quality signal, not a security verdict |
unknown | A record exists but no conclusion could be drawn (kept unknown, never silently upgraded) |
untested | No install-test record — usually no parseable install command (L2 not passed) or queued for a later scan. Untested never means failed. |
| Field | Type | Semantics |
|---|---|---|
schema | string | Absolute URL of the JSON Schema validating this record |
id | string | Plugin id (matches plugins.json ids and an artifact slug) |
name | string | Display name of the plugin |
installTest.state | passed|failed|unknown|untested | Derived install verdict (see states above) |
installTest.level | L4 | Verification level this result describes |
installTest.verdict | passed|failed|unknown (absent when untested) | Raw L4 outcome from the winning record |
installTest.channel | npm|source (optional) | Whether the install came from a published npm package or the GitHub repo directly |
installTest.profileId | string (optional) | Verification profile that produced the result (e.g. l4-sandbox) |
installTest.checkedAt | string (ISO) (optional) | When the winning record was captured |
installTest.sourceRecordId | string (optional) | Append-only record id backing this verdict (audit trail) |
installTest.environment | object (optional) | Recorded environment — dshVersion / dshCliVersion / os / arch / adapterId, quoted verbatim, never invented |
links | object | plugin detail, install badge SVG, and verification-levels page |
license | object | Provenance and reuse terms (attribution required) |
Honesty rule: when state is untested, verdict / checkedAt / environment are omitted rather than filled with defaults.
Query one plugin (or open /data/install/<id>.json in a browser):
Install-test states are derived from append-only sandbox verification records (spec v1.1) bundled with each site build. Fields are append-only: existing fields are never removed or renamed. The JSON is free to reuse with attribution to dsh.so; check changelog for additions.