MkaliezZ / dsh-dependency-firewall

已收录

Dependency-installation guard for DeepSeek Harness: classifies package-manager commands as ALLOW, ASK, or BLOCK before execution.

main工具 查看源代码

安装

npx -y @deepseek-ai/dsh plugin --profile web add github:MkaliezZ/dsh-dependency-firewall

此安装命令根据 GitHub 仓库地址生成,是未经验证的安装起点。

README

维护者编写的文档快照。

在 GitHub 查看 ↗
提交版本 c5aaea7同步于 2026年8月18日

dsh-dependency-firewall

Domain-specific dependency-installation guard for DeepSeek Harness.

v0.1 classifies package-manager commands before execution and returns ALLOW, ASK, or BLOCK for common npm/pnpm/yarn/pip/uv/cargo install flows.

High-risk sources such as arbitrary URLs, git dependencies, alternate registries, unpinned VCS references, native/install-script flags, or unparseable install shapes can be escalated without running the underlying command.

Non-claims

  • no package is installed by this plugin;
  • no online reputation or CVE lookup in v0.1;
  • classification is bounded and deterministic, not complete supply-chain security.

Development

npm install
npm test

MIT

项目文件与信号

以下项目是目录快照中检测到的公开仓库信号。

测试已检测

仓库信息

开发语言
TypeScript
许可证
未提供
最后更新
2026年8月15日 07:02

谨慎安装

请检查源代码、权限、生命周期脚本、依赖与网络访问;不受信任的插件应先在隔离环境中测试。