Plugin market
dsh ships no official market, but it does read one. These are the two format-1 indexes dsh.so publishes: paste either URL into Plugins → Discover → Manage index sources, and Discover lists, searches, filters, sorts and installs straight from the document — no scraping, no API key, no separate account.
DSH.SO Install-Verified & Security-Audited Plugin Market
Only bundles that really installed on some real dsh version and carry a low-risk audit verdict. Every entry pins an exact version and an install source that is either a published npm release or a git commit — dsh gets a reproducible coordinate, not a homepage link.
https://cdn.dsh.so/market/index.json10,366 entries · document order = GitHub stars descending (Discover’s default sort)
DSH.SO Curated Leaderboard Plugin Market
The top 200 of each of the six installable-plugin leaderboards, merged into one document. Install verification is a label here rather than an admission gate, so entries that missed the sandbox still chart — medium, high and critical risk are still excluded.
https://cdn.dsh.so/market/top-rank.jsonusually 1,200 entries · its category directory is the six boards
What is in the index right now
- entries in the index
- 10,366
- out of 27,631 registry entries
- npm sources / commit-pinned git sources
- 3,926 / 6,440
- every entry pinned to an exact version
- categories · filter labels
- 10 · 25
- both usable as Discover filters
- verified on the current release / carried over
- 7,489 / 2,877
- a verdict from an earlier release still counts
Rebuilt on every deploy; snapshot taken (UTC).
What has to pass to be in the index
The index is not a re-serialisation of the registry: every layer below is a countable exclusion. The numbers come from this build’s own statistics and add up to the entries actually in /market/index.json.
| Stage | Entries |
|---|---|
| Registry entries (everything the site lists) | 27,631 |
| Ecosystem apps: desktop / Web shells, not installable with dsh plugin add | 349 |
| Repository renamed, deleted, untagged or merged | 2,756 |
| Not a DSH bundle (no dsh.bundle in the manifest) | 4,224 |
| No exact version or reproducible install source | 1,409 |
| Never installed successfully on any real dsh version | 7,473 |
| Security tier above low (medium, high, critical, or not audited yet) | 742 |
| Duplicate or invalid package name (a fork yields to the owner of the npm name) | 312 |
| = in the full market index | 10,366 |
Install verification asks only whether a real dsh version really installed the plugin — an older release’s verdict still counts, so a dsh upgrade does not wipe the index. The security tier must be confirmed low; an unaudited (pending) verdict does not reach the trusted layer.
Add it in three steps
- Step 1
Enable the experimental “Custom plugin indexes” plugin in dsh → Plugins.
- Step 2
Open Discover → Manage index sources → Add index source and paste a URL above exactly as written (no trailing slash).
- Step 3
Search, filter by category or label, sort, install — the version dsh installs is the one pinned in the index.
Both indexes can be added at once; a plugin appearing in both is expected. Full walkthrough: setup guide
Browse by category
These ids are exactly the category directory declared in the document header’s metadata.categories — one-to-one with the category filter in Discover. The count is how many indexed entries carry it.
- Tools & data1,718
- Memory & knowledge1,642
- Appearance1,343
- Web search1,103
- Dev workflow999
- Notifications907
- Office & docs590
- Agent orchestration476
- Content & social464
- Vision412
Where to go next
Every field, the label vocabulary, how the two documents differ, and the cache behaviour.
Where the curated index comes from, as a page: stars, weekly gain, npm downloads, activity, newest.
What “install-tested” actually measures, and why passing L4 is not the same as running.
The rest of the data endpoints: full plugin index, npm downloads, star trend.
Third-party content: entries are community code that passed our sandbox install and static / model-driven audits — not a line-by-line human review, so judge before you install. The index is rebuilt on every deploy (HTTP cache 5 minutes, 10 minutes on the dsh side) and reusable with attribution (CC BY 4.0, attribute dsh.so). Field additions are announced in thechangelog.