dsh-score

提供多维度的插件质量与安全性评分工具适合需要评估插件安装成功率、维护活跃度及合规性的审计人员。

包名

dsh-score

兼容性

待验证

Harness 依赖范围

>=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0

Cordis 依赖范围

^4.0.4

版本

0.2.16

许可证

Apache-2.0

All keys are optional (defaults shown); invalid values fail loudly at load.

Key	Default	Description
`probeTimeoutMs`	`60000`	Deadline for one `gh`/`npm` probe command.
`outputTailBytes`	`8000`	Cap on the sanitized output tail recorded per probe.
`cacheMaxAgeMs`	`86400000`	How long a cached score card is reused before re-scoring (0 disables the cache).
`staleCommitWarnDays`	`90`	Commit/publish age at which maintenance drops to `warn`.
`staleCommitFailDays`	`365`	Commit/publish age at which maintenance drops to `fail`.
`staleIssueWarnDays`	`30`	Oldest-open-issue age (response proxy) at which maintenance drops to `warn`.
`staleIssueFailDays`	`180`	Oldest-open-issue age at which maintenance drops to `fail`.
`maxBatchTargets`	`20`	`/score` batch cap.
`batchConcurrency`	`1`	Batch concurrency (serial avoids API-rate contention).
`weights`	`{install:25, maintenance:20, documentation:20, security:20, compliance:15}`	Per-dimension weights (each 0–100; at least one must be > 0).

安装

说明文档