npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

dsh-trust

v0.0.1

Published

Trust layer for DeepSeek Harness: audit, rollback, and policy gates for agent actions

Vulnerabilities

Powered byPowered by Snyk
  • 0High
  • 0Medium
  • 0Low

Links

Maintainers

tudamutudamu

Keywords

dshdeepseek-harnessdeepseekagentplugincordis

Readme

dsh-trust

Trust layer for DeepSeek Harness: audit, rollback, and policy gates for agent actions

A DeepSeek Harness (dsh) plugin.

Why

当 Agent 拿着用户的文件、凭据与支付权限行动时，"它做了什么、能否审计、能否回滚、能否追责"比"它多聪明"更重要。dsh-trust 目标成为 dsh 生态的信任层总入口。

What works in 0.0.1

This is a working plugin, not a name reservation:

  • trust_policy_check 工具：对一段即将执行的操作描述做敏感度分级（高危/中危/低危），内置破坏性命令、凭据访问、网络写入等规则，返回命中规则与建议。模型可在执行前自查。

Install it and ask the agent to call the tool — the loop (tool registration, schema validation, model invocation, structured output) is fully exercised.

Roadmap

  • 0.1.x — 会话级审计面板：append-only 事件流的可视化（谁、何时、调用了什么工具、动了哪些文件）
  • 0.2.x — 行为回滚：基于 Change Ledger 的文件/会话状态回退
  • 0.3.x — 策略引擎：可声明的审批门（敏感命令、网络出口、凭据访问前必须人工确认）
  • 0.4.x — 插件供应链审计：依赖锁定校验与 inject 清单核对

Install

dsh plugin --profile web add dsh-trust

DeepSeek Harness is in developer preview and states that compatibility-breaking changes will happen. This build was developed and tested against @deepseek-ai/dsh 0.1.0-rc.x (August 2026); re-verify against your host version before relying on it.

License

MIT