dsh-vet 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +136 -0
- package/bin/dsh-vet.mjs +7 -0
- package/docs/calibration-v0.1.md +58 -0
- package/docs/dsh-vet-v1.md +159 -0
- package/docs/rules/dep.floating-range.md +26 -0
- package/docs/rules/dep.install-scripts.md +26 -0
- package/docs/rules/dep.typosquat-proximity.md +30 -0
- package/docs/rules/egress.outbound-endpoints.md +29 -0
- package/docs/rules/egress.secret-adjacent.md +31 -0
- package/docs/rules/obf.charcode-chain.md +24 -0
- package/docs/rules/obf.dynamic-require.md +27 -0
- package/docs/rules/obf.encoded-payload.md +29 -0
- package/docs/rules/obf.eval-detect.md +26 -0
- package/docs/rules/obf.unparseable.md +25 -0
- package/docs/rules/perm.network-client.md +27 -0
- package/docs/rules/perm.seam-mismatch.md +34 -0
- package/docs/rules/perm.subprocess-spawn.md +28 -0
- package/docs/rules/perm.undeclared-fs-write.md +32 -0
- package/docs/rules/perm.unreachable-files.md +26 -0
- package/lib/index.d.mts +297 -0
- package/lib/index.mjs +1741 -0
- package/package.json +64 -0
package/package.json
ADDED
|
@@ -0,0 +1,64 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "dsh-vet",
|
|
3
|
+
"version": "0.1.0",
|
|
4
|
+
"description": "Security vetting for DeepSeek Harness (DSH) plugins: permission & supply-chain audits before install, graded via the open dsh-vet/v1 report standard.",
|
|
5
|
+
"dsh": {
|
|
6
|
+
"seams": ["fs", "shell", "web"]
|
|
7
|
+
},
|
|
8
|
+
"type": "module",
|
|
9
|
+
"packageManager": "pnpm@10.23.0",
|
|
10
|
+
"main": "lib/index.mjs",
|
|
11
|
+
"types": "lib/index.d.mts",
|
|
12
|
+
"bin": {
|
|
13
|
+
"dsh-vet": "bin/dsh-vet.mjs"
|
|
14
|
+
},
|
|
15
|
+
"exports": {
|
|
16
|
+
".": {
|
|
17
|
+
"types": "./lib/index.d.mts",
|
|
18
|
+
"default": "./lib/index.mjs"
|
|
19
|
+
},
|
|
20
|
+
"./package.json": "./package.json"
|
|
21
|
+
},
|
|
22
|
+
"files": [
|
|
23
|
+
"bin",
|
|
24
|
+
"lib",
|
|
25
|
+
"docs"
|
|
26
|
+
],
|
|
27
|
+
"scripts": {
|
|
28
|
+
"build": "tsdown",
|
|
29
|
+
"typecheck": "tsc --noEmit",
|
|
30
|
+
"test": "vitest run",
|
|
31
|
+
"test:update-goldens": "GOLDEN_UPDATE=1 vitest run test/golden.test.ts",
|
|
32
|
+
"self:audit": "pnpm build && node scripts/self-audit.mjs",
|
|
33
|
+
"pack:check": "pnpm pack --pack-destination ./node_modules/.cache/pack",
|
|
34
|
+
"verify": "pnpm typecheck && pnpm test && pnpm build && pnpm pack:check",
|
|
35
|
+
"prepublishOnly": "pnpm run build"
|
|
36
|
+
},
|
|
37
|
+
"keywords": [
|
|
38
|
+
"deepseek-harness",
|
|
39
|
+
"dsh",
|
|
40
|
+
"dsh-plugin",
|
|
41
|
+
"security",
|
|
42
|
+
"audit",
|
|
43
|
+
"supply-chain",
|
|
44
|
+
"static-analysis",
|
|
45
|
+
"vetting"
|
|
46
|
+
],
|
|
47
|
+
"license": "MIT",
|
|
48
|
+
"repository": {
|
|
49
|
+
"type": "git",
|
|
50
|
+
"url": "git+https://github.com/rogerdigital/dsh-vet.git"
|
|
51
|
+
},
|
|
52
|
+
"engines": {
|
|
53
|
+
"node": ">=20"
|
|
54
|
+
},
|
|
55
|
+
"devDependencies": {
|
|
56
|
+
"@types/node": "^22.10.0",
|
|
57
|
+
"tsdown": "^0.22.14",
|
|
58
|
+
"typescript": "^5.8.0",
|
|
59
|
+
"vitest": "^3.0.0"
|
|
60
|
+
},
|
|
61
|
+
"dependencies": {
|
|
62
|
+
"acorn": "^8.18.0"
|
|
63
|
+
}
|
|
64
|
+
}
|