What it may solve
Desktop BigFish companion for DSH: real-time balance, out-of-browser desktop Q&A, 7 custom animations, 53 meme lines.
Imported third-party catalog description; not a Registry verification conclusion.dafeiyu-buchibaifan
Automated evidence availableDesktop BigFish companion for DSH: real-time balance, out-of-browser desktop Q&A, 7 custom animations, 53 meme lines.
Author: piaobo123 · Just for Fun · Catalog snapshot: 2026-09-19Canonical semantic path
Interface & PersonalizationPersonalization & ExpressionDesktop Pets & CompanionsCompanion Agent Console
One primary path; alternate capabilities remain separate.Sources and public signals
2 stars · 1072 downloads
Signals were provided by the source catalog and do not imply quality or safety. 2026-09-19What can currently be confirmed
Active analysis coverage 4/5. Historical chains are retained but do not count toward current coverage.
Source structure
Conclusion: The source structure check completed without finding a structural issue.
Repository health
Conclusion: The GitHub repository is reachable and not archived. Public data: 2 stars, 15 commits, 1 forks, and 0 watches; latest commit 2026-09-15.
npm release
Conclusion: Resolved npm release 1.0.7, published 2026-09-15, license MIT.
DSH compatibility
Conclusion: Compatibility verification did not pass: the DSH process exited because a runtime dependency could not be loaded. Test environment: DSH 0.1.6-alpha.2, web profile.
Dependency audit
Conclusion: This bounded audit reported 0 known vulnerabilities. It covers only the locked versions and audit source; zero reports is not proof of safety.
Functional verification
The plugin’s advertised feature has not been automatically verified. Passing installation and startup does not prove that feature works.
Static risk scan
Conclusion: The scan found 6 characteristics that need attention: contains native binary files, contains credential or token handling code, may read environment variables, may create or modify files, may access the network, may start external processes. This is a bounded automated observation, not a determination of malicious intent.
Package integrity
Conclusion: Package name, version, entrypoints, and checksum passed validation. Artifact: @piaobo_gz/dafeiyu-buchibaifan@1.0.7; SHA-256: c57b7e86af95550a84fb7c9aed5c392504c4995f5b87a3a11ad77efec2b528ca.
Automated evidence is scoped to the named artifact, DSH target and profile. It is not a blanket safety or feature-completeness claim.
Continue with the latest plugin manager
Describe your task in a DSH conversation and mention dafeiyu-buchibaifan. After installing or updating the manager from npm latest, it can find this candidate through Registry, then inspect its actual source and version locally.
Sources available for local inspection
- npm package
@piaobo_gz/dafeiyu-buchibaifanAnalyzed 1.0.7 - GitHub source
github:piaobo123/dafeiyu-buchibaifanExact version not resolved