dsh-quality-score
Quality scorecard for DeepSeek Harness (dsh) plugins: 0-100 score + grade + per-component breakdown, with issues and fix suggestions.
Built on the same methodology as the ecosystem supply-chain health scan: manifest completeness, peer resolvability, dist-tag health (the #2763 class), dead ranges, freshness, and dsh-tools peer compatibility. Zero runtime dependencies, read-only.
Install
dsh plugin add dsh-quality-score
Or run standalone:
npx dsh-quality-score dsh-dep-audit
CLI
dsh-quality-score <npm-name> [--json]
dsh-quality-score --batch <names-file> [--json]
dsh-quality-score --batch-registry <registry.json> [--category <name>] [--json]
Prints the score, grade, component breakdown, issues and suggestions. --batch scores every package name in a file (one per line, # comments ignored) and prints a ranked leaderboard — the building block for a registry-wide quality table.
npx dsh-quality-score dsh-dep-audit
npx dsh-quality-score dsh-vault --json
npx dsh-quality-score --batch registry-names.txt
In-harness usage (agent-callable)
Ask your dsh agent:
给这个插件打个质量分：quality_score，包名 dsh-dep-audit。
Score this plugin: quality_score with name set to the npm package.
Returns a dsh-quality-score/v1 report:
{
"schema": "dsh-quality-score/v1",
"name": "dsh-dep-audit",
"ok": false,
"score": 65,
"grade": "C",
"components": [
{ "id": "manifest", "name": "Manifest completeness", "max": 20, "earned": 20, "note": "version 0.1.1" },
{ "id": "peer-resolvable", "name": "Peer resolvability", "max": 20, "earned": 20, "note": "1 peer range(s)" },
{ "id": "dist-tag", "name": "Dist-tag health", "max": 15, "earned": 15, "note": "latest=0.1.1" },
{ "id": "dead-ranges", "name": "Dead ranges", "max": 15, "earned": 15, "note": "none" },
{ "id": "freshness", "name": "Freshness", "max": 10, "earned": 10, "note": "2026-08-18" },
{ "id": "dsh-tools-peer", "name": "dsh-tools peer compat", "max": 10, "earned": 0, "note": "declared ^0.1.0-rc.6; dsh-tools latest=0.0.1-rc.1" }
],
"issues": ["declared @deepseek-ai/dsh-tools peer range is contradicted by the broken latest dist-tag (#2763 class)"],
"suggestions": ["Install with @deepseek-ai/dsh-tools@0.1.0-rc.7 (or the matching rc) until the official latest is fixed"],
"error": null
}
Components
| Component | Max | What it measures |
|---|
manifest | 20 | name / version / description / license present in the latest version |
peer-resolvable | 20 | every peer range has a published match |
dist-tag | 15 | latest vs next mismatch (#2763 class) |
dead-ranges | 15 | peer ranges referencing unpublished package names |
freshness | 10 | latest release within 365 days |
dsh-tools-peer | 10 | declared dsh-tools peer satisfied by the current latest dist-tag |
Grade: A ≥ 95 · B ≥ 85 · C ≥ 70 · D ≥ 55 · F below.
Why it exists
- The registry has 900+ plugins; quality signals exist (dsh-ecosystem, dsh-recommend) but nothing gives a per-plugin actionable score with fix suggestions from npm metadata alone.
- Same evidence basis as the supply-chain health scan — one dist-tag fix on the official side would raise scores across the ecosystem.
- Zero runtime dependencies, read-only; degrades gracefully offline.
Development
pnpm install
pnpm typecheck
pnpm build
pnpm test
pnpm test:integration
CI runs the dsh-plugin-doctor preflight, unit tests (mock registry), packed-artifact integration, and a fresh-profile dsh web boot smoke on Windows.
License
MIT © 2026 zoahdev
dsh-quality-score（中文）
DeepSeek Harness（dsh）插件的质量评分卡：0-100 分 + 等级 + 分项明细，带问题与修复建议。
方法学与 生态供应链健康扫描 一致：manifest 完整度、peer 可解析性、dist-tag 健康（#2763 类）、死依赖、新鲜度、dsh-tools peer 兼容性。零运行时依赖、只读。
安装
dsh plugin add dsh-quality-score
独立使用：
npx dsh-quality-score dsh-dep-audit
npx dsh-quality-score --batch registry-names.txt # 批量评分，输出质量榜单
在 harness 内使用（agent 可调用）
给这个插件打个质量分：quality_score，包名 dsh-dep-audit。
返回 dsh-quality-score/v1 报告（结构见英文版 JSON 示例）。
分项
| 组件 | 满分 | 衡量 |
|---|
manifest | 20 | latest 版本是否含 name/version/description/license |
peer-resolvable | 20 | 每个 peer 范围是否有已发布版本匹配 |
dist-tag | 15 | latest 与 next 不一致（#2763 类） |
dead-ranges | 15 | peer 范围引用不存在的包名 |
freshness | 10 | latest 发布时间是否在 365 天内 |
dsh-tools-peer | 10 | 声明的 dsh-tools peer 是否被当前 latest 满足 |
等级：A ≥ 95 · B ≥ 85 · C ≥ 70 · D ≥ 55 · F 以下。
为什么需要它
- 注册表 900+ 插件，质量信号存在但没有“npm 元数据就能给分 + 修复建议”的插件。
- 与供应链健康扫描同一证据基础；官方修一个 dist-tag 就能拉高全生态分数。
- 零运行时依赖、只读；离线优雅降级。
开发
pnpm install
pnpm typecheck
pnpm build
pnpm test
pnpm test:integration
CI 跑 dsh-plugin-doctor 预检、单元测试（mock 注册表）、打包集成、Windows 全新 profile 的 dsh web 启动冒烟。
许可证
MIT © 2026 zoahdev
Related ecosystem tools
FAQ
- How do I install? dsh plugin add dsh-quality-score or run the CLI directly (see README).
- Does it need an API key? No.
- Is it read-only? Yes by default; any write/apply is an explicit flag.
