Panorama Steady growth: 16,542 entries (+741 this week); 11,390 dsh plugins install-tested, 8,552 runtime-verified on dsh 0.1.6a2 (75.77% ); 0 critical and 106 medium awaiting review.
Metrics 2026-09-26 · Install Vol.4 (frozen 2026-09-22) Security W40 16,542 Indexed entries since 08-24 +4,875 · incl. unledgered 75.77% L5 runtime pass rate pass 8,552 · Vol.3 71.3% → +4.51pp
99.97% Test coverage tested 11,390 / dsh plugins 11,393
0 hi / med Risk exposure W40 caliber · 106 in review
9,442 Unique authors wk +426 · 30d active 4,650 +741 New entries this week 09-19 → 09-26 Three ledgers 15,883in ledger
dsh plugins 11,39371.73%
Eco-plugins 3,49922.03%
Eco-apps 9916.24%
Trust ladder L1-L5 8,55275.78%
L1 Found 11,380 · 100.0%
L2 Structured 11,379 · 100.0%
L3 Install spec 11,380 · 100.0%
L4 Install tested 11,285 · 99.1%
L5 Runtime verified 8,552 · 75.8%
Security summary 0critical
L5 pass rate · by version 70.5%→ 75.8%
0.1.2a1 0.1.2rc1 0.1.3a1 0.1.3a2 0.1.5rc2 0.1.6a1 0.1.6a2
passed pass rate
Active authors · 30d 4,650
npm weekly downloads · 39 pts 2,403,047times / wk
Total stars · 33 pts 738,181stars · cumulative
Star distribution 15,357P50 1 · P99 218
0 7,235 · 47.11%
1 3,400 · 22.14%
2–5 2,958 · 19.26%
6–20 1,096 · 7.14%
21–100 402 · 2.62%
100+ 266 · 1.73%
Maintenance pulse 19.28%updated ≤7d
2,995 / 19.3% 1,460 / 9.4% 3,125 / 20.1% 7,955 / 51.2%
≤7d 8–14d 15–30d >30d
Ecosystem flow 09-19 → 09-26
+741 new entries 09-19 → 09-26
+426 new authors
+1 medium 105 → 106
0 critical new / cleared W39 → W40
4 frozen report volumes Vol.1 → Vol.4
Scenario mix 15,535primary domain
Tools & data 19.27%
Memory & knowledge 17.43%
Dev workflow 12.71%
Web search 12.71%
Appearance 10.40%
Notifications 7.58%
Unclassified 5.78%
Vision 5.54%
Office & docs 3.80%
Agent orchestration 2.27%
Content & social 1.72%
Unclassified 0.80%
Install 11,390 dsh plugins sandbox-tested: 11,285 install (L4 99.1% ), 8,552 actually run on 0.1.6a2 (75.77% ). Installing is not running — 2,733 stuck in between.
Volume Vol.4 · dsh 0.1.6a2 Vol.3 · dsh 0.1.5rc2 Vol.2 · dsh 0.1.3a2 Vol.1 · dsh 0.1.3a1
Vol.4 · frozen 2026-09-22 · dsh 0.1.6a2 Install 14,908 plugins tested: 14,123 install (L4 94.7% ), 7,799 pass the L5 runtime smoke (71.26% , 3,964 eco-apps excluded).
Volume Vol.4 · dsh 0.1.6a2 Vol.3 · dsh 0.1.5rc2 Vol.2 · dsh 0.1.3a2 Vol.1 · dsh 0.1.3a1
Vol.3 · frozen 2026-09-15 · dsh 0.1.5rc2 Install 14,494 plugins tested: 13,711 install (L4 94.6% ), 7,175 pass the L5 runtime smoke (68.93% , 4,085 eco-apps excluded).
Volume Vol.4 · dsh 0.1.6a2 Vol.3 · dsh 0.1.5rc2 Vol.2 · dsh 0.1.3a2 Vol.1 · dsh 0.1.3a1
Vol.2 · frozen 2026-09-11 · dsh 0.1.3a2 Install 13,324 plugins tested: 12,568 install (L4 94.3% ), 6,448 pass the L5 runtime smoke (67.32% , 3,746 eco-apps excluded).
Volume Vol.4 · dsh 0.1.6a2 Vol.3 · dsh 0.1.5rc2 Vol.2 · dsh 0.1.3a2 Vol.1 · dsh 0.1.3a1
Vol.1 · frozen 2026-09-11 · dsh 0.1.3a1 11,390 Tested dsh plugins ratio denominator · 99.97% covered
8,552 Runtime-verified (L5) dsh 0.1.6a2
75.77% L5 pass rate pass / (tested − captured apps 103)
2,735 L5 failures 92% one cause · see failure profile
3,499 Eco-plugins install, never mount, no ratio
991 Eco-apps not installable, no ratio
14,908 Tested plugins registry 15,132 · legacy denominator includes eco-apps
7,799 Runtime-verified (L5) dsh 0.1.5rc2
71.26% L5 pass rate pass / (tested − apps 3,964)
3,145 L5 failures 88% one cause · see failure profile
3,964 L5 eco-apps excluded from ratios (legacy)
14,123 L4 installs −109 install failures
14,494 Tested plugins registry 14,496 · legacy denominator includes eco-apps
7,175 Runtime-verified (L5) dsh 0.1.3a2
68.93% L5 pass rate pass / (tested − apps 4,085)
3,202 L5 failures 89% one cause · see failure profile
4,085 L5 eco-apps excluded from ratios (legacy)
13,711 L4 installs −115 install failures
13,324 Tested plugins registry 13,325 · legacy denominator includes eco-apps
6,448 Runtime-verified (L5) dsh 0.1.3a1
67.32% L5 pass rate pass / (tested − apps 3,746)
3,009 L5 failures 89% one cause · see failure profile
3,746 L5 eco-apps excluded from ratios (legacy)
12,568 L4 installs −107 install failures
Install funnel — registry to runtime Vol.4
Registry entries
15,883
100% · everything indexed
dsh plugins
11,393
71.7% · −4,490: eco-plugins 3,499 + eco-apps 991 apart
Tested
11,390
99.97% · nearly every dsh plugin went through the sandbox
L4 installs
11,285
99.1% · −105 install failures
L5 runs runtime-verified
8,552
75.77% · −2,733 installed but never ran
Install funnel — registry to runtime Vol.3
Registry entries
15,132
100% · everything indexed
Tested
14,908
100.00% · legacy caliber · 3,964 eco-apps excluded
L4 installs
14,123
94.7% · −109 install failures
L5 runs runtime-verified
7,799
71.26% · −6,324 installed but never ran
Install funnel — registry to runtime Vol.2
Registry entries
14,496
100% · everything indexed
Tested
14,494
100.00% · legacy caliber · 4,085 eco-apps excluded
L4 installs
13,711
94.6% · −115 install failures
L5 runs runtime-verified
7,175
68.93% · −6,536 installed but never ran
Install funnel — registry to runtime Vol.1
Registry entries
13,325
100% · everything indexed
Tested
13,324
100.00% · legacy caliber · 3,746 eco-apps excluded
L4 installs
12,568
94.3% · −107 install failures
L5 runs runtime-verified
6,448
67.32% · −6,120 installed but never ran
Failure profile 2,735failures
Plugin tree load failure 2,524 · 92%
Boot failed 80 · 3%
Duplicate loader entry id 50 · 2%
Missing from loader inventory 35 · 1%
HTTP not served 28 · 1%
Failure profile 3,145failures
Plugin tree load failure 2,752 · 88%
Boot failed 113 · 4%
Missing from loader inventory 70 · 2%
Duplicate loader entry id 49 · 2%
HTTP not served 39 · 1%
Failure profile 3,202failures
Plugin tree load failure 2,853 · 89%
Boot failed 83 · 3%
Missing from loader inventory 67 · 2%
Duplicate loader entry id 50 · 2%
HTTP not served 22 · 1%
Failure profile 3,009failures
Plugin tree load failure 2,669 · 89%
Boot failed 60 · 2%
Missing from loader inventory 60 · 2%
HTTP not served 55 · 2%
Duplicate loader entry id 50 · 2%
L5 pass rate · by version 70.5%→ 75.8%
0.1.2a1 0.1.2rc1 0.1.3a1 0.1.3a2 0.1.5rc2 0.1.6a1 0.1.6a2
passed pass rate
L5 pass rate · by version 70.0%→ 72.0%
0.1.2a1 0.1.2rc1 0.1.3a1 0.1.3a2 0.1.5rc2
passed pass rate
L5 pass rate · by version 69.9%→ 69.9%
0.1.2a1 0.1.2rc1 0.1.3a1 0.1.3a2
passed pass rate
L5 pass rate · by version 69.9%→ 69.0%
0.1.2a1 0.1.2rc1 0.1.3a1
passed pass rate
L4 installs vs L5 runs 99.1%→ 75.8%
0.1.2a1 0.1.2rc1 0.1.3a1 0.1.3a2 0.1.5rc2 0.1.6a1 0.1.6a2
L4 installs L5 runs
L4 installs vs L5 runs 94.7%→ 71.3%
0.1.2a1 0.1.2rc1 0.1.3a1 0.1.3a2 0.1.5rc2
L4 installs L5 runs
L4 installs vs L5 runs 94.6%→ 68.9%
0.1.2a1 0.1.2rc1 0.1.3a1 0.1.3a2
L4 installs L5 runs
L4 installs vs L5 runs 94.3%→ 67.3%
0.1.2a1 0.1.2rc1 0.1.3a1
L4 installs L5 runs
Channels × outcomes 11,287tested
npm package 3,440 · 82%
GitHub source 7,847 · 73%
Total 11,287 · 76%
Channels × outcomes 14,908tested
npm package 2,860 · 73%
GitHub source 12,048 · 47%
Total 14,908 · 52%
Channels × outcomes 14,494tested
npm package 2,146 · 71%
GitHub source 12,348 · 46%
Total 14,494 · 50%
Channels × outcomes 13,324tested
npm package 1,569 · 69%
GitHub source 11,755 · 46%
Total 13,324 · 48%
Security 1,650 plugins scanned (96.60% coverage): pre-triage raw verdicts: 21 critical, 105 medium, 876 low. (first week, no delta)
Weekly W40 · 09-27 W39 · 09-26 W38 · 09-18 W37 · 09-12 W36 · 09-05 W35 · 08-29 W34 · 08-22 W33 · 08-16
Weekly W33 · generated 2026-08-16pre-triage raw verdicts Security 10,814 plugins scanned (99.01% coverage): pre-triage raw verdicts: 8 critical, 778 medium, 9,796 low. vs last week: critical -13 / 13 cleared, medium +673.
Weekly W40 · 09-27 W39 · 09-26 W38 · 09-18 W37 · 09-12 W36 · 09-05 W35 · 08-29 W34 · 08-22 W33 · 08-16
Weekly W34 · generated 2026-08-22pre-triage raw verdicts Security 12,371 plugins scanned (99.43% coverage): pre-triage raw verdicts: 11 critical, 892 medium, 11,251 low. vs last week: critical +3 / 0 cleared, medium +114.
Weekly W40 · 09-27 W39 · 09-26 W38 · 09-18 W37 · 09-12 W36 · 09-05 W35 · 08-29 W34 · 08-22 W33 · 08-16
Weekly W35 · generated 2026-08-29pre-triage raw verdicts Security 12,632 plugins scanned (98.78% coverage): pre-triage raw verdicts: 12 critical, 944 medium, 11,457 low. vs last week: critical +1 / 0 cleared, medium +52.
Weekly W40 · 09-27 W39 · 09-26 W38 · 09-18 W37 · 09-12 W36 · 09-05 W35 · 08-29 W34 · 08-22 W33 · 08-16
Weekly W36 · generated 2026-09-05pre-triage raw verdicts Security 14,670 plugins scanned (98.52% coverage): pre-triage raw verdicts: 1,249 critical, 2,083 medium, 11,121 low. vs last week: critical +1,237 / 0 cleared, medium +1,139.
Weekly W40 · 09-27 W39 · 09-26 W38 · 09-18 W37 · 09-12 W36 · 09-05 W35 · 08-29 W34 · 08-22 W33 · 08-16
Weekly W37 · generated 2026-09-12pre-triage raw verdicts Security 15,443 plugins scanned (99.08% coverage): pre-triage raw verdicts: 0 critical, 108 medium, 15,113 low. vs last week: critical -1,249 / 1,249 cleared, medium -1,975.
Weekly W40 · 09-27 W39 · 09-26 W38 · 09-18 W37 · 09-12 W36 · 09-05 W35 · 08-29 W34 · 08-22 W33 · 08-16
Weekly W38 · generated 2026-09-18pre-triage raw verdicts Security 16,191 plugins scanned (99.00% coverage): 0 critical , 105 medium 15,844 low. vs last week: critical +0 / 0 cleared, medium -3.
Weekly W40 · 09-27 W39 · 09-26 W38 · 09-18 W37 · 09-12 W36 · 09-05 W35 · 08-29 W34 · 08-22 W33 · 08-16
Weekly W39 · generated 2026-09-26static rules + vet engine + dynamic audit (raise-only) Security 16,321 plugins scanned (99.25% coverage): 0 critical , 106 medium 15,985 low. vs last week: critical +0 / 0 cleared, medium +1.
Weekly W40 · 09-27 W39 · 09-26 W38 · 09-18 W37 · 09-12 W36 · 09-05 W35 · 08-29 W34 · 08-22 W33 · 08-16
Weekly W40 · generated 2026-09-27static rules + vet engine + dynamic audit (raise-only) 1,650 Plugins scanned W33 · coverage 96.60%
876 Low risk 87.43% · classified
21 Critical · raw first week
58 Pending scan coverage 96.60%
10,814 Plugins scanned W34 · coverage 99.01%
9,796 Low risk 92.57% · classified
8 Critical · raw new 0 / cleared 13
108 Pending scan coverage 99.01%
12,371 Plugins scanned W35 · coverage 99.43%
11,251 Low risk 92.57% · classified
11 Critical · raw new 3 / cleared 0
71 Pending scan coverage 99.43%
12,632 Plugins scanned W36 · coverage 98.78%
11,457 Low risk 92.30% · classified
12 Critical · raw new 1 / cleared 0
156 Pending scan coverage 98.78%
14,670 Plugins scanned W37 · coverage 98.52%
11,121 Low risk 76.95% · classified
1,249 Critical · raw new 1,237 / cleared 0
220 Pending scan coverage 98.52%
15,443 Plugins scanned W38 · coverage 99.08%
15,113 Low risk 99.29% · classified
0 Critical · raw new 0 / cleared 1,249
143 Pending scan coverage 99.08%
16,191 Plugins scanned W39 · coverage 99.00%
15,844 Low risk 99.34% · classified
0 Critical new 0 / cleared 0
164 Pending scan coverage 99.00%
16,321 Plugins scanned W40 · coverage 99.25%
15,985 Low risk 99.34% · classified
0 Critical new 0 / cleared 0
124 Pending scan coverage 99.25%
Risk exposure 1,002classified
Risk exposure 10,582classified
-13 / 13 critical new / cleared W33 → W34
+673 medium 105 → 778
+9,164 scanned 1,650 → 10,814
3 wks consecutive zero-critical (current caliber)
232 no classifiable evidence
Risk exposure 12,154classified
+3 / 0 critical new / cleared W34 → W35
+114 medium 778 → 892
+1,557 scanned 10,814 → 12,371
3 wks consecutive zero-critical (current caliber)
217 no classifiable evidence
Risk exposure 12,413classified
+1 / 0 critical new / cleared W35 → W36
+52 medium 892 → 944
+261 scanned 12,371 → 12,632
3 wks consecutive zero-critical (current caliber)
219 no classifiable evidence
Risk exposure 14,453classified
+1,237 / 0 critical new / cleared W36 → W37
+1,139 medium 944 → 2,083
+2,038 scanned 12,632 → 14,670
3 wks consecutive zero-critical (current caliber)
217 no classifiable evidence
Risk exposure 15,221classified
-1,249 / 1,249 critical new / cleared W37 → W38
-1,975 medium 2,083 → 108
+773 scanned 14,670 → 15,443
3 wks consecutive zero-critical (current caliber)
222 no classifiable evidence
Risk exposure 15,949classified
+0 / 0 critical new / cleared W38 → W39
-3 medium 108 → 105
+748 scanned 15,443 → 16,191
3 wks consecutive zero-critical (current caliber)
242 no classifiable evidence
Risk exposure 16,091classified
+0 / 0 critical new / cleared W39 → W40
+1 medium 105 → 106
+130 scanned 16,191 → 16,321
3 wks consecutive zero-critical (current caliber)
230 no classifiable evidence
103 entries ≥2w on list
Risk mix · six weeks bars = scanned
Top security findings 508Shell / subprocess
Shell / subprocess 508
Dynamic code execution 239
Destructive commands 111
Hardcoded secrets 27
Obfuscated code 22
Data exfiltration 2
Medium-risk list 105in review
… 105 more in the weekly report
Medium-risk list 778in review
… 773 more in the weekly report
Medium-risk list 892in review
… 887 more in the weekly report
Medium-risk list 944in review
… 939 more in the weekly report
Medium-risk list 2,083in review
… 2,078 more in the weekly report
Medium-risk list 108in review
… 103 more in the weekly report
Medium-risk list 105in review
… 100 more in the weekly report
Medium-risk list 106in review
… 101 more in the weekly report
Method & limits 96.60%coverage
01 Scan coverage 96.60%
02 Classifiable 60.73%
03 Critical share 2.10%
04 Manual waivers 1
05 Dynamic audit 2 / 1
04 Manual waivers 0
A clean scan is not proof of safety; dynamic scanning can only raise risk, never waive it — waivers come solely from the methodology
Method & limits 99.01%coverage
01 Scan coverage 99.01%
02 Classifiable 97.85%
03 Critical share 0.08%
04 Manual waivers 1
05 Dynamic audit 2 / 1
04 Manual waivers 0
A clean scan is not proof of safety; dynamic scanning can only raise risk, never waive it — waivers come solely from the methodology
Method & limits 99.43%coverage
01 Scan coverage 99.43%
02 Classifiable 98.25%
03 Critical share 0.09%
04 Manual waivers 1
05 Dynamic audit 2 / 1
04 Manual waivers 0
A clean scan is not proof of safety; dynamic scanning can only raise risk, never waive it — waivers come solely from the methodology
Method & limits 98.78%coverage
01 Scan coverage 98.78%
02 Classifiable 98.27%
03 Critical share 0.10%
04 Manual waivers 1
05 Dynamic audit 2 / 1
04 Manual waivers 0
A clean scan is not proof of safety; dynamic scanning can only raise risk, never waive it — waivers come solely from the methodology
Method & limits 98.52%coverage
01 Scan coverage 98.52%
02 Classifiable 98.52%
03 Critical share 8.64%
04 Manual waivers 1
05 Dynamic audit 2 / 1
04 Manual waivers 0
A clean scan is not proof of safety; dynamic scanning can only raise risk, never waive it — waivers come solely from the methodology
Method & limits 99.08%coverage
01 Scan coverage 99.08%
02 Classifiable 98.56%
03 Critical share 0.00%
04 Manual waivers 1
05 Dynamic audit 2 / 1
04 Manual waivers 0
A clean scan is not proof of safety; dynamic scanning can only raise risk, never waive it — waivers come solely from the methodology
Method & limits 99.00%coverage
01 Scan coverage 99.00%
02 Classifiable 98.51%
03 Critical share 0.00%
04 Manual waivers 1
05 Dynamic audit 2 / 1
04 Manual waivers 0
A clean scan is not proof of safety; dynamic scanning can only raise risk, never waive it — waivers come solely from the methodology
Method & limits 99.25%coverage
01 Scan coverage 99.25%
02 Classifiable 98.59%
03 Critical share 0.00%
04 Manual waivers 1
05 Dynamic audit 2 / 1
04 Manual waivers 0
A clean scan is not proof of safety; dynamic scanning can only raise risk, never waive it — waivers come solely from the methodology