Canonical semantic path
One primary path; alternate capabilities remain separate.Categories and searchInstall and one-click updatesEnable and disable management
This SHOW summary is based on public project material and is separate from Registry evidence.
What it may solve
Browse, search and install community plugins from inside DeepSeek Harness settings, with category filters, one-click updates, enable/disable, theme switching and configuration backup.
Imported third-party catalog description; not a Registry verification conclusion.Sources and public signals
dsh-market/dsh-market
4146 stars · 407369 downloads
Signals were provided by the source catalog and do not imply quality or safety. 2026-09-19What can currently be confirmed
Active analysis coverage 5/5. Historical chains are retained but do not count toward current coverage.
Analysis completeSource structure
Conclusion: The source structure check completed without finding a structural issue.
Analysis completeRepository health
Conclusion: The GitHub repository is reachable and not archived. Public data: 4152 stars, 522 commits, 211 forks, and 6 watches; latest commit 2026-09-19.
Analysis completenpm release
Conclusion: Resolved npm release 1.48.0, published 2026-09-18, license MIT.
Analysis completeDSH compatibility
Conclusion: Compatibility verification passed. Installation, profile loading, and sustained startup all completed. Test environment: DSH 0.1.6-alpha.2, web profile.
Analysis completeDependency audit
Conclusion: This bounded audit reported 0 known vulnerabilities. It covers only the locked versions and audit source; zero reports is not proof of safety.
Not analyzedFunctional verification
The plugin’s advertised feature has not been automatically verified. Passing installation and startup does not prove that feature works.
Analysis completeStatic risk scan
Conclusion: The scan found 7 characteristics that need attention: declares a prepare script, normally used when building or publishing the package, contains credential or token handling code, may read environment variables, may create or modify files, may access the network, may start external processes, may execute shell commands. This is a bounded automated observation, not a determination of malicious intent.
Analysis completePackage integrity
Conclusion: Package name, version, entrypoints, and checksum passed validation. Artifact: dshmarket@1.48.0; SHA-256: 3457d258cc31f37ca55e5fa93d3dcdf714f731f432f9c1250ff4156543b7522d.
Automated evidence is scoped to the named artifact, DSH target and profile. It is not a blanket safety or feature-completeness claim.
Continue with the latest plugin manager
Describe your task in a DSH conversation and mention dsh-market. After installing or updating the manager from npm latest, it can find this candidate through Registry, then inspect its actual source and version locally.
Install or update the plugin manager (latest)Sources available for local inspection
- npm package
dshmarketAnalyzed 1.48.0 - GitHub source
github:dsh-market/dsh-marketExact version not resolved
View source catalog record · View GitHub repository