dsh-plugin-observatory v0.1.0-rc.1
Pre-release
Pre-release
Highlights
- Adds static compatibility auditing for local DSH plugin bundles.
- Adds bounded Loader lifecycle observation and two model-facing audit tools.
- Hardens YAML patch traversal against cyclic aliases, excessive depth, and alias expansion.
- Resolves host DSH versions from the CLI package or a consistent set of mounted core packages.
- Preserves PluginAuditReport reportVersion 1 compatibility.
Validation
- Node.js 22.19.0 and 24
- @deepseek-ai/dsh 0.1.0-rc.6
- 22 unit and composition tests
- Coverage gates: statements 95%, branches 85%, functions 100%, lines 95%
- publint, pack dry-run, and real tarball/profile install-import-uninstall smoke test
Scope and limitations
This release candidate audits local plugin source and bounded host lifecycle behavior. It does not claim execution safety, registry or GitHub discovery, persistent history, Web UI, sandboxing, A/B replay, or token and latency attribution. Unknown host versions require review rather than being treated as verified compatibility.