DSH Forge
Safe verification, compatibility checks, and transactional lifecycle tools for DeepSeek Harness plugins.
Project overview
Static compatibility and permission verification for DeepSeek Harness plugins. DSH Forge is a community developer tool, not an official DeepSeek product. A passing receipt is not a security audit. What it does
DSH Forge checks a plugin before it is installed into a real profile: verifies the dsh.bundle install contract; checks official DSH peer ranges against a selected DSH baseline; applies the prerelease rule needed by DSH rc versions; reads declared and high-signal inferred permissions; records source provenance and platform compatibility; optionally runs npm pack --dry-run --ignore-scripts for a local package; emits a normalized JSON Receipt without absolute machine paths or user data.
The default baseline is 0.1.0-rc.7, pinned to the public DSH tag dsh-v0.1.0-rc.7.