Dsh Tool Git

Key features

• No shell injectionevery command goes through execFile with an explicit argument array.
• The plugin's own tools — e.g.
• dsh.bundle.patch in package.json points at cordis.patch.yml, so dsh plugin add activates the plugin as a profile layer.
• Model-supplied paths and messages are never string-interpolated.
• Machine outputporcelain v2, --numstat, and --format records are parsed into structured JSON, not prose.