<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>dsh-plugin-vetting — release evidence</title>
  <id>https://deeplugin.store/plugins/deeplugin-702ddcb2463b653aff00.atom.xml</id>
  <updated>2026-08-16T13:41:06Z</updated>
  <link rel="self" type="application/atom+xml" href="https://deeplugin.store/plugins/deeplugin-702ddcb2463b653aff00.atom.xml"/>
  <link rel="alternate" href="https://deeplugin.store/plugins/deeplugin-702ddcb2463b653aff00.html"/>
  <entry>
    <title>Updated: dsh-plugin-vetting</title>
    <id>tag:deeplugin.store,2026-08-16:deeplugin-702ddcb2463b653aff00/148e80b87113502b</id>
    <updated>2026-08-16T13:41:06Z</updated>
    <link rel="alternate" href="https://deeplugin.store/plugins/deeplugin-702ddcb2463b653aff00.html"/>
    <author><name>truelove-dreamer</name></author>
    <category term="dev"/>
    <summary>Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: awesome-dsh-plugin/awesome-dsh-plugin; changed: description, description_i18n.</summary>
  </entry>
  <entry>
    <title>Updated: dsh-plugin-vetting</title>
    <id>tag:deeplugin.store,2026-08-16:deeplugin-702ddcb2463b653aff00/7c79633ee3559ed0</id>
    <updated>2026-08-16T09:56:16Z</updated>
    <link rel="alternate" href="https://deeplugin.store/plugins/deeplugin-702ddcb2463b653aff00.html"/>
    <author><name>truelove-dreamer</name></author>
    <category term="dev"/>
    <summary>Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: zoahdev/dsh-subscribe; changed: description, description_i18n.</summary>
  </entry>
  <entry>
    <title>Updated: dsh-plugin-vetting</title>
    <id>tag:deeplugin.store,2026-08-16:deeplugin-702ddcb2463b653aff00/70d2d7b2fa0f38be</id>
    <updated>2026-08-16T08:41:44Z</updated>
    <link rel="alternate" href="https://deeplugin.store/plugins/deeplugin-702ddcb2463b653aff00.html"/>
    <author><name>truelove-dreamer</name></author>
    <category term="dev"/>
    <summary>Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: dsh-market/dsh-market; changed: description, description_i18n.</summary>
  </entry>
  <entry>
    <title>Updated: dsh-plugin-vetting</title>
    <id>tag:deeplugin.store,2026-08-15:deeplugin-702ddcb2463b653aff00/39c4cd8ba93a4acf</id>
    <updated>2026-08-15T22:14:49Z</updated>
    <link rel="alternate" href="https://deeplugin.store/plugins/deeplugin-702ddcb2463b653aff00.html"/>
    <author><name>truelove-dreamer</name></author>
    <category term="dev"/>
    <summary>Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: zoahdev/dsh-subscribe; changed: sources.</summary>
  </entry>
  <entry>
    <title>Updated: dsh-plugin-vetting</title>
    <id>tag:deeplugin.store,2026-08-15:deeplugin-702ddcb2463b653aff00/e1d2ae6b34bd984b</id>
    <updated>2026-08-15T22:14:49Z</updated>
    <link rel="alternate" href="https://deeplugin.store/plugins/deeplugin-702ddcb2463b653aff00.html"/>
    <author><name>truelove-dreamer</name></author>
    <category term="dev"/>
    <summary>Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: dsh-market/dsh-market; changed: sources.</summary>
  </entry>
  <entry>
    <title>New: dsh-plugin-vetting</title>
    <id>tag:deeplugin.store,2026-08-15:deeplugin-702ddcb2463b653aff00/0aa1d725c44f3843</id>
    <updated>2026-08-15T22:14:49Z</updated>
    <link rel="alternate" href="https://deeplugin.store/plugins/deeplugin-702ddcb2463b653aff00.html"/>
    <author><name>truelove-dreamer</name></author>
    <category term="dev"/>
    <summary>Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate. Exact install spec: dsh-plugin-vetting. Source event: awesome-dsh-plugin/awesome-dsh-plugin; changed: listed.</summary>
  </entry>
</feed>
