dsh-plugin-guard

DSH plugin gate + clinic: static audit before and after install, hash lock, peer search, mechanical detox. Never executes the target plugin.

Star

7-day growth

Contributors

Language

TypeScript

Updated

2026-08-16

Install

Derived from package metadata

dsh plugin --profile web add github:taxueseek/dsh-plugin-guard

The author hasn't published to npm, so this command installs from git source. pnpm ≥ 10 refuses to run a git dependency's prepare script until you grant it, so your first install needs an allowBuilds entry in that profile's pnpm-workspace.yaml — which means letting this package's code run on your machine. Pin a #commit while you're at it.

The name after --profile is a profile name you choose yourself — swap in whichever one you use.

Share card

Drop it into your README — it links back to this page.

Badge (inline)

[![dshfind](https://dshfind.com/api/badge/taxueseek/dsh-plugin-guard)](https://dshfind.com/en/plugins/taxueseek/dsh-plugin-guard?ref=badge)

Card (440×200)

[![dshfind](https://dshfind.com/api/card/taxueseek/dsh-plugin-guard)](https://dshfind.com/en/plugins/taxueseek/dsh-plugin-guard?ref=badge)

#security