Installation
npx -y @deepseek-ai/dsh plugin --profile web add github:863683348/dsh-plugin-quality-hubThis installation command is an unverified starting point generated from the GitHub repository address.
README
Maintainer-authored documentation snapshot.
DSH Plugin Quality Hub
Independent ratings and security signals for the DeepSeek Harness (DSH) plugin ecosystem — "which plugins are actually worth installing?"
Live site: GitHub Pages (docs/) — set Pages source to main branch / docs folder.
Pages
- Top Rated — 0-100 scores, A-D grades, top 100 by stars
- Trending — recently active & most starred
- Security Watch — dangerous install scripts, missing dsh.bundle (tag farming), archived repos
- DSH Weekly — weekly English digest (issue drafts in
weekly/)
How it works
scripts/fetch-data.mjs— pulls thedsh-plugintopic (stars desc, top 100), probes npm registry (version, publish date, dsh.bundle declaration, install scripts, weekly downloads), marks curated entries from the awesome list, then scores every plugin with dsh-audit's pure scoring engine.scripts/build-site.mjs— zero-dependency static generator:dist/*.html+dist/plugin/<name>.htmldetail pages.
npm run all # fetch + build
npm run fetch # refresh data only
npm run build # rebuild site from data/catalog.json
The scoring model (weights: maintenance 30 / docs 25 / npm 30 / ecosystem 15; security flags veto the grade) is documented on the site's methodology section.
Newsletter
DSH Weekly is a weekly English digest (drafts in weekly/). Wire subscribe.html to Buttondown / Substack / Mailchimp to go live.
Notes
- Heuristics only — not a substitute for code review, especially for long-tail plugins.
- Data is a weekly snapshot; full-topic deep scanning (with static security scan) is provided by dsh-audit.
- Not affiliated with DeepSeek.
Project files and signals
Shown items are public repository signals detected in the directory snapshot.
Repository information
- Language
- TypeScript
- License
- Not reported
- Last updated
- Aug 18, 2026, 8:19 AM
Install deliberately
Review source code, permissions, lifecycle hooks, dependencies and network access. Test untrusted plugins in an isolated environment.