863683348 / dsh-plugin-quality-hub

Listed

Independent ratings and security signals for the DSH plugin ecosystem - which plugins are actually worth installing?

mainOther View source

Installation

npx -y @deepseek-ai/dsh plugin --profile web add github:863683348/dsh-plugin-quality-hub

This installation command is an unverified starting point generated from the GitHub repository address.

README

Maintainer-authored documentation snapshot.

View on GitHub ↗
Commit 7763c14Synced Aug 18, 2026

DSH Plugin Quality Hub

Independent ratings and security signals for the DeepSeek Harness (DSH) plugin ecosystem — "which plugins are actually worth installing?"

Live site: GitHub Pages (docs/) — set Pages source to main branch / docs folder.

Pages

  • Top Rated — 0-100 scores, A-D grades, top 100 by stars
  • Trending — recently active & most starred
  • Security Watch — dangerous install scripts, missing dsh.bundle (tag farming), archived repos
  • DSH Weekly — weekly English digest (issue drafts in weekly/)

How it works

  1. scripts/fetch-data.mjs — pulls the dsh-plugin topic (stars desc, top 100), probes npm registry (version, publish date, dsh.bundle declaration, install scripts, weekly downloads), marks curated entries from the awesome list, then scores every plugin with dsh-audit's pure scoring engine.
  2. scripts/build-site.mjs — zero-dependency static generator: dist/*.html + dist/plugin/<name>.html detail pages.
npm run all      # fetch + build
npm run fetch    # refresh data only
npm run build    # rebuild site from data/catalog.json

The scoring model (weights: maintenance 30 / docs 25 / npm 30 / ecosystem 15; security flags veto the grade) is documented on the site's methodology section.

Newsletter

DSH Weekly is a weekly English digest (drafts in weekly/). Wire subscribe.html to Buttondown / Substack / Mailchimp to go live.

Notes

  • Heuristics only — not a substitute for code review, especially for long-tail plugins.
  • Data is a weekly snapshot; full-topic deep scanning (with static security scan) is provided by dsh-audit.
  • Not affiliated with DeepSeek.

Project files and signals

Shown items are public repository signals detected in the directory snapshot.

TestsDetected
DocumentationDetected

Repository information

Language
TypeScript
License
Not reported
Last updated
Aug 18, 2026, 8:19 AM

Install deliberately

Review source code, permissions, lifecycle hooks, dependencies and network access. Test untrusted plugins in an isolated environment.