Installation
npx -y @deepseek-ai/dsh plugin --profile web add github:MkaliezZ/dsh-dependency-firewallThis installation command is an unverified starting point generated from the GitHub repository address.
README
Maintainer-authored documentation snapshot.
dsh-dependency-firewall
Domain-specific dependency-installation guard for DeepSeek Harness.
v0.1 classifies package-manager commands before execution and returns ALLOW, ASK, or BLOCK for common npm/pnpm/yarn/pip/uv/cargo install flows.
High-risk sources such as arbitrary URLs, git dependencies, alternate registries, unpinned VCS references, native/install-script flags, or unparseable install shapes can be escalated without running the underlying command.
Non-claims
- no package is installed by this plugin;
- no online reputation or CVE lookup in v0.1;
- classification is bounded and deterministic, not complete supply-chain security.
Development
npm install
npm test
MIT
Project files and signals
Shown items are public repository signals detected in the directory snapshot.
Repository information
- Language
- TypeScript
- License
- Not reported
- Last updated
- Aug 15, 2026, 7:02 AM
Install deliberately
Review source code, permissions, lifecycle hooks, dependencies and network access. Test untrusted plugins in an isolated environment.