Loading npm security reports…
Git status badges for DeepSeek Harness: sidebar workspace rows (via the sidebar.workspaces.row seam) and an input-row chip showing the current conversation's workspace git state. Event-driven freshness over SSE.
No confirmed malicious attack surface. At runtime, the plugin reads git status for registered workspaces and serves it through local application routes.
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgThe package exposes local HTTP and event-stream routes for git-status updates.
package.jsonView on unpkg · L1The runtime invokes the local git executable and watches registered workspace directories.
lib/index.jsView on unpkg · L44The package exposes local HTTP and event-stream routes for git-status updates.
lib/index.jsView on unpkg · L224This report applies to dsh-git-badge@0.5.1.
See version security history for other recorded verdicts.
Evidence last updated: .
The package exposes local HTTP and event-stream routes for git-status updates.
package.jsonView on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgThe runtime invokes the local git executable and watches registered workspace directories.
lib/index.jsView on unpkg · L44The package exposes local HTTP and event-stream routes for git-status updates.
lib/index.jsView on unpkg · L224