{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"no-prm-dsh-explorer-dsh-explorer","slug":"no-prm-dsh-explorer-dsh-explorer","rank":353,"url":"https://github.com/No-PRM/dsh-explorer/tree/main/dsh-plugins/dsh-explorer","name":"No-PRM/dsh-explorer#dsh-explorer","category":"git","description":{"zh":"Git 优先的文件树侧栏：VS Code 风格层级线、M/A/U/D/R git 状态装饰、HEAD 与工作区对照预览、媒体预览、拖拽引用（文件/文件夹/选中代码带行号）—— 纯插件。","en":"Git-first file-tree sidebar for the DSH web GUI: VS Code-style indent guides, M/A/U/D/R git decorations, HEAD-vs-worktree diff preview, media preview, and drag-to-reference (files/folders/selected code with line numbers) — pure plugin."},"stars":8,"starsCheckedAt":"2026-08-21","repository":{"owner":"No-PRM","repo":"dsh-explorer","requestedRef":"main","subpath":"dsh-plugins/dsh-explorer"},"npm":null,"downloads":null,"installMode":"github-source","upstreamInstall":"dsh plugin --profile web add github:No-PRM/dsh-explorer#path:/dsh-plugins/dsh-explorer","tarball":null,"added":"2026-08-16","page":"https://awesome-dsh-plugin.com/p/No-PRM/dsh-explorer--dsh-plugins-dsh-explorer/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"no-prm-dsh-explorer-dsh-explorer","slug":"no-prm-dsh-explorer-dsh-explorer","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:24:06.234Z","scanStatus":"static-complete","verdict":"pass","score":99,"commit":"f0835e20914d1db9cd9f3a558b5977d678c84e47","commitDate":"2026-08-16T15:20:47+08:00","artifactDigest":"sha256:ad4e527172c78972dca001aa27fed9cab6358fe98871b4c6053c38a999b18b4a","downloadUrl":"https://github.com/No-PRM/dsh-explorer/archive/f0835e20914d1db9cd9f3a558b5977d678c84e47.tar.gz","installMode":"github-source","installCommand":"dsh plugin --profile web add github:No-PRM/dsh-explorer#path:/dsh-plugins/dsh-explorer","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"dsh-explorer","packageVersion":"0.1.0","bundle":{"patch":"./cordis.patch.yml"},"client":null,"lifecycleScripts":{},"peerDependencies":[]},"identity":{"status":"not-published","installMode":"github-source","upstreamNpm":null,"manifestName":"dsh-explorer","nameMatch":null,"npm":null,"repositoryMatch":"not-checked","provenance":"not-checked","tarballHost":null},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"explorer","name":"dsh-explorer","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":null,"parseErrors":[]},"capabilities":["filesystem","host-bundle","subprocess"],"outboundHosts":[],"findings":[{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"lib/index.js","pathClass":"source","line":4,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"89dedaa9e6429e9e52b8af60"}],"counts":{"critical":0,"high":0,"medium":0,"low":1},"rawCounts":{"critical":0,"high":0,"medium":0,"low":1},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-missing","vulnerabilities":"lockfile-missing","identity":"complete","artifact":"not-compared","llmReview":"not-needed","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":5,"bytesScanned":23470,"truncated":false,"lockfiles":[],"pathClasses":{"markdown":2,"cordis":1,"source":1,"manifest":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"]},"timeline":[{"scannedAt":"2026-08-22T08:24:06.234Z","commit":"f0835e20914d1db9cd9f3a558b5977d678c84e47","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:25:17.056Z","commit":"f0835e20914d1db9cd9f3a558b5977d678c84e47","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T10:53:51.695Z","commit":"f0835e20914d1db9cd9f3a558b5977d678c84e47","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"f0835e20914d1db9cd9f3a558b5977d678c84e47","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:24:06.234Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"f0835e20914d1db9cd9f3a558b5977d678c84e47","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:25:17.056Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"f0835e20914d1db9cd9f3a558b5977d678c84e47","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:53:51.695Z"}]}