DeepSeek Harness Plugin Ecosystem Report — August 2026
Volume 1. A snapshot of the public DeepSeek Harness plugin ecosystem through the dsh.so discovery and verification pipeline. All figures are absolute values as of the 2026-08-25 daily snapshot; this report deliberately makes no growth claims.
Executive summary
The index currently holds 12,054 artifacts built by 6,933 authors, anchored to an official harness repository with 195,030 stars. Every artifact has passed repository and metadata validation gates; 89.5% clear both explicit checks that make deeper verification possible. The verification stage itself has not started issuing verdicts — 0 verified — while security scanning already covers 99.8% of the index and surfaces 41,464 findings. Discovery is running ahead of verification; closing that gap is exactly what this registry is building.
Ecosystem size
Verification funnel
Artifacts that have not completed verification are described as not verified. They are never described as unsafe.
Findings
The verification layer is being built in public
Observation. No indexed artifact carries a Verified mark yet — by construction, not by omission.
Verified artifacts: 0 Indexed artifacts: 12,054 Coverage: 0% As of: 2026-08-25
Scope. This is pipeline plumbing: the registry does not yet expose per-artifact verification stage flags, so the verified count cannot rise even for plugins that would qualify.
Limitation. A 0% coverage figure describes the current instrumentation, not ecosystem quality. This snapshot reflects the current ecosystem state and should not be interpreted as a longitudinal growth trend.
Most indexed artifacts already clear explicit metadata and repository checks
Observation. 89.5% of indexed artifacts pass the explicit metadata-and-repository validity proxy used as the current coverage denominator.
Indexed artifacts: 12,054 Proxy-valid: 10,790 Share: 89.5% As of: 2026-08-25
Scope. The proxy requires repository reachability plus core metadata fields (name, description, install command). It is a floor, not a verification verdict.
Limitation. Passing the proxy says nothing about code behavior; it only means an artifact is checkable at all. This snapshot reflects the current ecosystem state and should not be interpreted as a longitudinal growth trend.
Security scanning reaches essentially the whole index — and surfaces signal everywhere
Observation. 41,464 findings across 12,034 sandbox-scanned artifacts (99.8% of the index), averaging roughly 3.5 findings per artifact. 75.0% land in the info bucket.
Scanned: 12,034 Findings: 41,464 Critical: 3,917 (9.4%) Warning: 6,447 (15.5%) Info: 31,100 (75%) As of: 2026-08-25
Scope. Findings are observable patterns recorded by heuristic scanning. They are triage input, ranked and bucketed.
Limitation. Finding counts are not vulnerability counts and say nothing about intent; rescan variance moves totals between runs. This snapshot reflects the current ecosystem state and should not be interpreted as a longitudinal growth trend.
npm packaging is today’s minority path — and where measurable usage sits
Observation. 11.2% of indexed artifacts declare an npm package. That subset carried 1,018,144 last-week downloads, with a 99.3% npm-to-GitHub repository consistency rate across all declared packages.
Artifacts declaring npm: 1,356 Share of index: 11.2% Last-week downloads: 1,018,144 Consistency checked: 1,356 packages As of: 2026-08-25
Scope. Downloads measure package installs through npm, not unique users; GitHub-install-only plugins are invisible to this metric.
Limitation. Download counts include CI and mirror traffic. Channel shares may shift as the ecosystem matures. This snapshot reflects the current ecosystem state and should not be interpreted as a longitudinal growth trend.
Cite this report
dsh.so — DeepSeek Harness Plugin Ecosystem Report, Vol.1 (August 2026). Index: 12,054 artifacts · 6,933 authors · proxy-valid 10,790 (89.5%) Security: 12,034 scanned · 41,464 findings (9.4% critical / 15.6% warning / 75.0% info) npm: 1,356 declared packages · 1,018,144 weekly downloads · 99.3% repository consistency Snapshot date: 2026-08-25 · https://dsh.so/reports/ecosystem-vol1/
Data dictionary v1.1 governs every caliber above. Raw daily values live in data/metrics-history/snapshots.jsonl.