dsh-plugin-update-audit
针对 npm、GitHub 和本地软件包来源中的 DeepSeek Harness 配置文件插件进行只读更新审计。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:wcnm8888/dsh-plugin-update-audit#4c782efaa0790f668d932347e2375e094bebb90aPlugin Update Audit 以 dsh-plugin-update-audit 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Read-only update auditing for direct plugin dependencies in a DeepSeek Harness Profile.
The plugin adds one tool, plugin_update_audit. It inventories the selected Profile and checks each direct dependency according to its declared source:
latest manifest;HEAD through the GitHub API;The tool never installs, updates, removes, or rewrites a plugin. Network access is limited to registry.npmjs.org and api.github.com; use offline: true for local inventory only. Local dependency paths are redacted from tool output.
dsh plugin --profile <profile> add dsh-plugin-update-audit@0.1.0
Restart DSH Desktop after installation.
Ask the agent to call plugin_update_audit:
{
"profile": "dev-lab",
"offline": false,
"timeout_ms": 10000
}
Statuses are advisory:
update_available: npm has a newer stable latest version;upstream_changed: GitHub HEAD differs from an immutable pinned commit;local_review_required: a local or workspace source needs an explicit rebuild and review;current, ahead, offline, unpinned, not_installed, or unavailable: no automatic update conclusion is made.Always review release notes and source changes, create a safety snapshot, update one plugin at a time, restart DSH, and run that plugin's acceptance tests.
npm install
npm run check
npm test
npm pack --dry-run
See SECURITY.md. This project is licensed under the MIT License.