MkaliezZ/dsh-dependency-firewall

README 摘要

dsh-dependency-firewall Domain-specific dependency-installation guard for DeepSeek Harness. v0.1 classifies package-manager commands before execution and returns ALLOW , ASK , or BLOCK for common npm/pnpm/yarn/pip/uv/cargo install flows. High-risk sources such as arbitrary URLs, git dependencies, alternate registries, unpinned VCS references, native/install-script flags, or unparseable install shapes can be escalated without running the underlying command. Non-claims - no package is installed by this plugin; - no online reputation or CVE lookup in v0.1; - classification is bounded and deterministic, not complete supply-chain security. Development MIT

分类