What it may solve
Hard gate for self-modification restarts: a green-build credential bound to the git HEAD, checked before any restart of the running instance
Imported third-party catalog description; not a Registry verification conclusion.Hard gate for self-modification restarts: a green-build credential bound to the git HEAD, checked before any restart of the running instance
Author: Khorsheed · Git & Code Review · Catalog snapshot: 2026-09-19Canonical semantic path
Hard gate for self-modification restarts: a green-build credential bound to the git HEAD, checked before any restart of the running instance
Imported third-party catalog description; not a Registry verification conclusion.— stars · 3220 downloads
Signals were provided by the source catalog and do not imply quality or safety. 2026-09-19Active analysis coverage 1/5. Historical chains are retained but do not count toward current coverage.
Source structure has not been analyzed.
Repository metadata has not been analyzed.
npm release metadata has not been analyzed.
Conclusion: Compatibility verification did not pass: the DSH process kept running but did not become healthy within the observation window. Test environment: DSH 0.1.6-alpha.2, web profile.
Conclusion: This bounded audit reported 0 known vulnerabilities. It covers only the locked versions and audit source; zero reports is not proof of safety.
The plugin’s advertised feature has not been automatically verified. Passing installation and startup does not prove that feature works.
Conclusion: The scan found 7 characteristics that need attention: contains credential or token handling code, may read environment variables, may create or modify files, may access the network, references system persistence locations, may start external processes, may execute shell commands. This is a bounded automated observation, not a determination of malicious intent.
Conclusion: Package name, version, entrypoints, and checksum passed validation. Artifact: @khorsheed/dsh-ankh-guard@0.3.0; SHA-256: dfdb2ee2cbb18bdc078bc2835ea51b346fc0957b252a6501caacb18a6a95d8d9.
Automated evidence is scoped to the named artifact, DSH target and profile. It is not a blanket safety or feature-completeness claim.
Describe your task in a DSH conversation and mention @khorsheed/dsh-ankh-guard. After installing or updating the manager from npm latest, it can find this candidate through Registry, then inspect its actual source and version locally.
@khorsheed/dsh-ankh-guardAnalyzed 0.3.0github:Khorsheed/dsh-pluginsExact version not resolved