{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"ldchaowin-dsh-plugin-notify-sound","slug":"ldchaowin-dsh-plugin-notify-sound","rank":918,"url":"https://github.com/ldchaowin/dsh-plugin-notify-sound","name":"ldchaowin/dsh-plugin-notify-sound","category":"voice","description":{"zh":"按工作区定制的任务完成铃声，以及审批、提问、计划评审、目标受阻、任务失败等需要人介入事件的注意提示音，支持内置合成音、语音播报与自定义音频。","en":"Per-workspace completion ringtones plus attention sounds for approval, question, plan-review, goal-blocked, and task-failure events, with built-in synth, voice (TTS), and custom audio."},"stars":2,"starsCheckedAt":"2026-08-21","repository":{"owner":"ldchaowin","repo":"dsh-plugin-notify-sound","requestedRef":null,"subpath":""},"npm":"dsh-plugin-notify-sound","downloads":71,"installMode":"npm","upstreamInstall":"dsh plugin --profile web add dsh-plugin-notify-sound","tarball":null,"added":"2026-08-14","page":"https://awesome-dsh-plugin.com/p/ldchaowin/dsh-plugin-notify-sound/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"ldchaowin-dsh-plugin-notify-sound","slug":"ldchaowin-dsh-plugin-notify-sound","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:29:54.304Z","scanStatus":"static-complete","verdict":"pass","score":100,"commit":"d6a267dea612569fd97340e62fb9ff6c7873702b","commitDate":"2026-08-14T18:20:32+08:00","artifactDigest":"sha256:72109aa646eb6b4a7ec6e53a3e877eed20ac0a33fed90b1c484ebb1ac8b27d30","downloadUrl":"https://github.com/ldchaowin/dsh-plugin-notify-sound/archive/d6a267dea612569fd97340e62fb9ff6c7873702b.tar.gz","installMode":"npm","installCommand":"dsh plugin --profile web add dsh-plugin-notify-sound","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"dsh-plugin-notify-sound","packageVersion":"1.0.0","bundle":{"patch":"./cordis.patch.yml"},"client":{"platform":"web","inject":["@deepseek-ai/dsh-client-runtime","@deepseek-ai/dsh-client-ui-settings"]},"lifecycleScripts":{},"peerDependencies":["@deepseek-ai/cordis"]},"identity":{"status":"found","installMode":"npm","upstreamNpm":"dsh-plugin-notify-sound","manifestName":"dsh-plugin-notify-sound","nameMatch":true,"npm":{"name":"dsh-plugin-notify-sound","latestVersion":"1.0.0","publishedAt":"2026-08-14T10:44:36.829Z","createdAt":"2026-08-14T10:44:36.487Z","versionCount":1,"maintainers":1,"repository":"git+https://github.com/ldchaowin/dsh-plugin-notify-sound.git","hasInstallScripts":false,"deprecated":false},"repositoryMatch":"match","provenance":"none","tarballHost":null,"versionMatch":"match"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"notify-sound","name":"dsh-plugin-notify-sound","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":"web","parseErrors":[]},"capabilities":["browser-ui","filesystem","host-bundle","session"],"outboundHosts":[],"findings":[{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"tools/test-client.mjs","pathClass":"source","line":80,"evidence":"new Function(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","hash":"942e95b1a477686df9dc74bf","review":{"verdict":"placeholder","reason":"该 new Function 位于 tools/test-client.mjs 测试脚本中，仅用于在单测里加载自身打包后的客户端源码进行沙盒模拟测试，不在 package.json files 列表内，不随插件发布或在真实宿主运行时执行。","model":"sonnet","reviewedAt":"2026-08-21T11:01:41.318Z"}}],"counts":{"critical":0,"high":0,"medium":0,"low":0},"rawCounts":{"critical":0,"high":1,"medium":0,"low":0},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-missing","vulnerabilities":"lockfile-missing","identity":"complete","artifact":"not-compared","llmReview":"complete","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":11,"bytesScanned":68989,"truncated":false,"lockfiles":[],"pathClasses":{"markdown":3,"cordis":1,"source":5,"manifest":1,"script":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"],"review":{"model":"sonnet","reviewedAt":"2026-08-22T08:29:54.306Z","summary":null,"intentMatch":null,"findingsReviewed":1,"findingsCandidates":1,"fromCache":1,"usage":null}},"timeline":[{"scannedAt":"2026-08-22T08:29:54.304Z","commit":"d6a267dea612569fd97340e62fb9ff6c7873702b","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:32:41.870Z","commit":"d6a267dea612569fd97340e62fb9ff6c7873702b","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:01:41.318Z","commit":"d6a267dea612569fd97340e62fb9ff6c7873702b","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"d6a267dea612569fd97340e62fb9ff6c7873702b","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:29:54.304Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"d6a267dea612569fd97340e62fb9ff6c7873702b","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:32:41.870Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"d6a267dea612569fd97340e62fb9ff6c7873702b","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T11:01:41.318Z"}]}