zoahdev/dsh-dep-audit0

dsh-dep-audit

Dependency supply-chain hygiene audit for DeepSeek Harness (dsh) projects and profiles: peer-range resolvability, broken dist-tag detection, stale/missing-license/non-registry dependencies, and installed-vs-declared drift. Complements dsh-poison-guard (malware scan) and dsh-plugin-doctor (publish readiness).

AI Analysis

对 DSH 插件项目的依赖进行供应链安全与健康度审计。适合插件开发者用于检测依赖冲突、许可证缺失或版本漂移等潜在风险。

Package
dsh-dep-audit
Version
0.1.0
License
MIT
Last updated
Aug 18, 2026

Install

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:zoahdev/dsh-dep-audit

In-harness usage (agent-callable)

After install, ask your dsh agent:

审计一下当前插件的依赖健康:dep_audit,目录指向项目根目录。 Run a dependency audit on this plugin: dep_audit with dir set to the project root.

The agent calls the dep_audit tool (dir, optional options), which returns a dsh-dep-audit/v1 report:

{
  "schema": "dsh-dep-audit/v1",
  "target": ".",
  "offline": false,
  "ok": true,
  "summary": { "total": 8, "pass": 8, "warn": 0, "fail": 0 },
  "checks": [ ... ]
}

在 harness 内使用(agent 可调用)

装好后对 agent 说:

审计一下当前插件的依赖健康:dep_audit,目录指向项目根目录。

agent 会调用 dep_audit 工具(dir,可选 options),返回 dsh-dep-audit/v1 报告:

{
  "schema": "dsh-dep-audit/v1",
  "target": ".",
  "offline": false,
  "ok": true,
  "summary": { "total": 8, "pass": 8, "warn": 0, "fail": 0 },
  "checks": [ ... ]
}