Loading npm security reports…
Git status badges for DeepSeek Harness: an input-row chip on every install, plus sidebar session-row badges (git status, PR/CI action tokens) after one manual step: `npx dsh-git-badge apply`, then restart dsh web. Event-driven freshness over SSE.
Installation automatically modifies files in a separately installed DeepSeek Harness UI package. It replaces the host client and index code after locating a global installation.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
seam/postinstall.jsView on unpkgPackage source references child process execution.
seam/postinstall.jsView on unpkg · L23Package source invokes a package manager install command at runtime.
seam/postinstall.jsView on unpkg · L23This report applies to dsh-git-badge@0.10.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L17Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L17A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgPackage source references child process execution.
seam/postinstall.jsView on unpkg · L23Package source invokes a package manager install command at runtime.
seam/postinstall.jsView on unpkg · L23This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
seam/postinstall.jsView on unpkg