Plugin Managersby dsh-market

dsh-market

A plugin market inside DeepSeek Harness for browsing, searching, and one-click installs.

Native DSH BundleCompatibility confidence: MediumEvidence score 88/100
View source
Stars 1.2k
LanguageTypeScript
LicenseMIT
Last updatedAug 19, 2026
Registry addedAug 19, 2026

What it does

A native Web-profile marketplace that lists community plugins, shows screenshots, installs and updates from npm or Git, and can hot-disable plugins through the official patch layer. The maintainer documents a minimum host of DSH 0.1.0-rc.6 and a self-management settings card on 0.1.0-rc.7.

In-harness marketplace UI
One-click install and update
Hot disable through official patches
Documents rc.6 and rc.7 host requirements

Install evidence

Commands appear only when they are present in maintainer documentation.

dsh plugin --profile web add dshmarket
Install sourcePublished npm package
Command provenanceRepository README
Registry install testNot run

Published npm bundle. The package declares a prepare build script. Registry install test not run.

Compatibility confidence

Documented claims are kept separate from registry-run tests.

Snapshot · Aug 19, 2026

Profiles

Web profile Documented
Documented DSH version0.1.0-rc.7
Registry install testNot run

Platforms

macOS Documented
Windows Limited evidence
Linux Documented
Maintainer evidence

Evidence is tied to the current repository state and may change after DSH or plugin updates.

Review method

Evidence provenance

Where each registry statement comes from.

ClassificationNative DSH Bundlepackage.json · dsh.bundle.patch → ./cordis.patch.yml
PackagedshmarketRepository package metadata · Aug 19, 2026
Install commandRepository READMEhttps://github.com/dsh-market/dsh-market#readme
CompatibilityMaintainer documents DSH 0.1.0-rc.7Maintainer evidence
Registry verificationInstall not run · Runtime not runNo independent execution result is claimed.
Published npm version1.15.0Registry metadata only; no install was run

Security context

Observable capabilities and package signals, not a formal audit.

Review
Source available Yes
License detectedMIT
Install-time package scriptsprepare
Known critical advisories Not independently checked
Automated dependency review Scanner not connected

Capabilities to review

Network access Filesystem access Profile writes Build scripts