CMSKL/dsh-plugin-observatory ↗★ 1
dsh-plugin-observatory
DSH 插件静态兼容性审计与加载器生命周期观测插件。
AI 分析
核心用途是在安装前对本地插件进行静态安全与兼容性审计,输出 JSON 报告。适合 DSH 插件开发者或对插件安全性有严格要求的系统管理员。
安裝
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:CMSKL/dsh-plugin-observatory說明文件
閱讀完整 README ↗Configuration
| Key | Default | Meaning |
|---|---|---|
allowedRoots | [process.cwd()] in a direct mount; the shipped bundle uses the working directory and DSH profile root | Package directories must resolve beneath one of these canonical roots. |
maxManifestBytes | 262144 | Maximum UTF-8 bytes read from package.json; maximum accepted value is 32 MiB. |
maxPatchBytes | 1048576 | Maximum UTF-8 bytes read from the declared bundle patch; maximum accepted value is 32 MiB. |
maxPatchDepth | 64 | Maximum parsed patch object/array nesting depth; maximum accepted value is 256. |
maxPatchNodes | 10000 | Maximum object/array visits, including repeated alias expansion; maximum accepted value is 100,000. |
maxObservedEntries | 256 | Maximum Loader entry histories retained in memory. |
maxTransitionsPerEntry | 64 | Maximum recent transitions retained for one Loader entry. |