MkaliezZ / dsh-dependency-firewall

Listed

Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.

mainTool View source

Installation

npx -y @deepseek-ai/dsh plugin --profile web add github:MkaliezZ/dsh-dependency-firewall

This installation command is an unverified starting point generated from the GitHub repository address.

README

Maintainer-authored documentation snapshot.

View on GitHub ↗
Commit c5aaea7Synced Aug 18, 2026

dsh-dependency-firewall

Domain-specific dependency-installation guard for DeepSeek Harness.

v0.1 classifies package-manager commands before execution and returns ALLOW, ASK, or BLOCK for common npm/pnpm/yarn/pip/uv/cargo install flows.

High-risk sources such as arbitrary URLs, git dependencies, alternate registries, unpinned VCS references, native/install-script flags, or unparseable install shapes can be escalated without running the underlying command.

Non-claims

  • no package is installed by this plugin;
  • no online reputation or CVE lookup in v0.1;
  • classification is bounded and deterministic, not complete supply-chain security.

Development

npm install
npm test

MIT

Project files and signals

Shown items are public repository signals detected in the directory snapshot.

TestsDetected

Repository information

Language
TypeScript
License
Not reported
Last updated
Aug 15, 2026, 7:02 AM

Install deliberately

Review source code, permissions, lifecycle hooks, dependencies and network access. Test untrusted plugins in an isolated environment.