DeepSeek Harness Plugin

Anguis-L/dsh-plugin-adoption

Category Plugin Markets & Managers Added 2026-10-27

Ranks DSH plugins by real monthly npm downloads instead of GitHub stars, and names the plugins that star ordering under-rates. It reports the disagreement between the two orderings rather than a single quality verdict, and every number is a live read from npm's public downloads endpoint at call time, not a stored snapshot. A second dimension answers what downloads cannot: it reads the tools version line a plugin declares in peerDependencies and compares it with the version running here, so a popular plugin that cannot be installed on this host is reported instead of recommended. Read-only GETs, no HTTP route of its own.

Install

# from a prebuilt release tarball

dsh plugin --profile web add "https://github.com/Anguis-L/dsh-plugin-adoption/releases/download/v0.2.0/dsh-plugin-adoption-0.2.0.tgz"

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:Anguis-L/dsh-plugin-adoption

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.