Press & Media

What dsh.so is

• • A community-run registry that indexes plugin metadata already published in public places — primarily the GitHub API and the npm registry.
• • A trust layer: every entry is checked against the GitHub API, then marked with a public verification level from L1 (repository found, non-empty, has a README) to L5 (installs and loads in an isolated container), plus automated security scans.
• • Explicit about provenance: the registry labels what an author declared versus what dsh.so independently verified. The rules are public — see Install Verification.
• • Free to use, and its data may be reused with attribution to dsh.so.

What dsh.so is not

• • Not affiliated with DeepSeek AI. dsh.so is not affiliated with, endorsed by, or sponsored by DeepSeek AI. Maintainers do not act on DeepSeek's behalf and do not approve plugins for official distribution.
• • Not a marketplace. There are no accounts, payments, transactions, or ratings. Plugins are published and distributed by their authors; dsh.so hosts no plugin code and sells nothing.
• • Not a warranty. A verification result describes what was tested under documented conditions at a point in time. A plugin can change after that, so the detail page — not a headline — is the current answer.

Verifiable sources

Please cite these rather than a screenshot; they are regenerated by the data pipeline and each shows its own date.

• • Open data & APIs — public JSON endpoints, including the plugin index and download counts.
• • llms.txt — a machine-readable summary of the site for AI systems and crawlers.
• • Install Verification (L1–L5) — the rules behind every verification label.
• • Install ecosystem report (Vol.9) — the latest frozen report: methodology, pass rates, and the failure breakdown behind them.
• • Security reports — weekly scan summaries with the same static-plus-dynamic audit the detail pages use.

At a glance

As of 2026-10-30, the registry indexes more than 20,000 plugin entries for DeepSeek Harness. Counts move with the pipeline, so quote the live number from /data/ and keep this date with it.

If a story calls dsh.so "official"

It is not. dsh.so is an independent community project with no affiliation to DeepSeek AI, and it is not the official plugin registry or an official distribution channel for DeepSeek Harness.

If a published piece describes dsh.so as official, or as connected to DeepSeek AI, the correct replacement sentence is:

"dsh.so is an independent community registry, not affiliated with DeepSeek AI."

Email hello@dsh.so with the URL and the sentence in question; we will confirm the correct wording and point you at the primary source within a few days. Corrections to plugin data itself (wrong owner, stale version, disputed scan result) go through the same inbox.