GitHub · 核心生态
dsh-plugin-vetting
装插件前体检：静态扫描恶意模式（外传/凭据/混淆/持久化）与高权限误用，覆盖传递依赖与官方包哈希基线（防供应链篡改），可选插件工具调用闸。
SOURCE-DECLARED INSTALL
dsh plugin --profile web add dsh-plugin-vettingSource-declared command. Review the package and Registry Listing before running it.
MEDIA REFERENCES
Captured in public view
No public media reference was captured for this record.
REGISTRY LISTINGS
Source-attributed install evidence
| Registry source | Install spec | Version | Verification claim | Observed | Raw snapshot |
|---|---|---|---|---|---|
| zoahdev/dsh-subscribe · registry.json | dsh-plugin-vettingnpm | — | source does not claim verified | 2026-08-15 → 2026-08-16 | 962 |
| awesome-dsh-plugin/awesome-dsh-plugin · https://awesome-dsh-plugin.com/plugins.json | dsh-plugin-vettingnpm | — | unreported | 2026-08-15 → 2026-08-16 | 962 |
| dsh-market/dsh-market · data/registry-snapshot.json | dsh-plugin-vettingnpm | — | unreported | 2026-08-15 → 2026-08-16 | 962 |
Verification is a claim made by the named Registry Source; it is not a security, compatibility, quality, or official-endorsement claim by this site.
CONTEXT
Why it is here
装插件前体检：静态扫描恶意模式（外传/凭据/混淆/持久化）与高权限误用，覆盖传递依赖与官方包哈希基线（防供应链篡改），可选插件工具调用闸。
Evidence updated 2026-08-16T09:56:16Z. Interaction numbers are platform-native snapshots; the evidence panel records the metric source and observation time. NULL means the public page did not expose a number at collection time.