GitHub · 核心生态
Dep Audit
依赖供应链卫生审计：peer 范围可解析性、坏 dist-tag 检测（#2763 类）、过期/缺许可证/非注册表来源依赖，以及安装版本与声明的漂移。CLI + agent 可调用 dep_audit 工具，输出 dsh-dep-audit/v1 报告。
SOURCE-DECLARED INSTALL
dsh plugin --profile web add dsh-dep-auditSource-declared command. Review the package and Registry Listing before running it.
MEDIA REFERENCES
Captured in public view
REGISTRY LISTINGS
Source-attributed install evidence
| Registry source | Install spec | Version | Verification claim | Observed | Raw snapshot |
|---|---|---|---|---|---|
| zoahdev/dsh-subscribe · registry.json | dsh-dep-auditnpm | 0.1.0 | source claims verified | 2026-08-18 → 2026-08-19 | 1169 |
Verification is a claim made by the named Registry Source; it is not a security, compatibility, quality, or official-endorsement claim by this site.
CONTEXT
Why it is here
依赖供应链卫生审计：peer 范围可解析性、坏 dist-tag 检测（#2763 类）、过期/缺许可证/非注册表来源依赖，以及安装版本与声明的漂移。CLI + agent 可调用 dep_audit 工具，输出 dsh-dep-audit/v1 报告。
Evidence updated 2026-08-19T13:11:54Z. Interaction numbers are platform-native snapshots; the evidence panel records the metric source and observation time. NULL means the public page did not expose a number at collection time.