What it does A native Web-profile marketplace that lists community plugins, shows screenshots, installs and updates from npm or Git, and can hot-disable plugins through the official patch layer. The maintainer documents a minimum host of DSH 0.1.0-rc.6 and a self-management settings card on 0.1.0-rc.7.
In-harness marketplace UI One-click install and update Hot disable through official patches Documents rc.6 and rc.7 host requirements Install evidence Commands appear only when they are present in maintainer documentation.
$ dsh plugin --profile web add dshmarketCopy install command Install source Published npm package
Registry install verdict Passed
Published npm bundle. The package declares a prepare build script. See the versioned verification fields for the current independent verdict.
Compatibility evidence Maintainer claims, external observations, and registry-run tests stay separate.
Exact external observation dshmarket@1.66.2
Stale stale for 4 days DSH 0.1.7-rc.2
Node 22.23.2
Surface headless
Environment linux/x64
Observed Sep 21, 2026
Expires Sep 28, 2026
the exact artifact installed, registered, loaded, and satisfied its direct peer contracts under the requested DSH version
Profiles Documented DSH version 0.1.0-rc.7
Registered in profile Yes
Profile composition Passed
Platforms Windows
Maintainer evidence Evidence is tied to the current repository state and may change after DSH or plugin updates.
Review method Evidence provenance Where each registry statement comes from.
Classification Native DSH Bundle package.json · dsh.bundle.patch → ./cordis.patch.yml
Package dshmarket Repository package metadata · Oct 3, 2026
Install command Repository README https://github.com/dsh-market/dsh-market#readme
Compatibility Maintainer documents DSH 0.1.0-rc.7 Maintainer evidence
Registry install verdict Passed installed and registered in the profile
Runtime and conflicts Runtime not run Works alone: Unknown · Combination-tested: No · Conflict evidence: unknown
Published npm version 1.66.8 Registry metadata only; no install was run
Security context Observable capabilities and package signals, not a formal audit.
Review License detected MIT
Install-time package scripts prepare
Known critical advisories Automated dependency review Capabilities to review 