{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"physicolor-harness-ui-enhancer","slug":"physicolor-harness-ui-enhancer","rank":331,"url":"https://github.com/Physicolor/harness-ui-enhancer","name":"Physicolor/harness-ui-enhancer","category":"ui","description":{"zh":"DeepSeek Harness Web UI 强化层：规范化官方未完善、设计语言矛盾的界面，协调已装插件间的样式冲突并统一视觉语言（全部遵循官方设计令牌）；支持实时自定义对话宽度、markdown 字号、工作区缩放与 UI 字体。","en":"Web UI polish layer for DeepSeek Harness: normalizes unfinished or self-contradictory official UI, reconciles style conflicts between installed plugins, and unifies the visual language via official design tokens; live-customizable chat width, markdown font size, workspace scale and UI font stack."},"stars":8,"starsCheckedAt":"2026-08-21","repository":{"owner":"Physicolor","repo":"harness-ui-enhancer","requestedRef":null,"subpath":""},"npm":"harness-ui-enhancer","downloads":873,"installMode":"npm","upstreamInstall":"dsh plugin --profile web add harness-ui-enhancer","tarball":null,"added":"2026-08-15","page":"https://awesome-dsh-plugin.com/p/Physicolor/harness-ui-enhancer/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"physicolor-harness-ui-enhancer","slug":"physicolor-harness-ui-enhancer","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:23:51.723Z","scanStatus":"static-complete","verdict":"caution","score":95,"commit":"e07cbcb25d86e2524dbf103cb3d098b53ac31651","commitDate":"2026-08-22T12:03:22+08:00","artifactDigest":"sha256:70f2c53c7bd6c71451e51c805501f652be7447949ea7e493294d2baeaf15d97e","downloadUrl":"https://github.com/Physicolor/harness-ui-enhancer/archive/e07cbcb25d86e2524dbf103cb3d098b53ac31651.tar.gz","installMode":"npm","installCommand":"dsh plugin --profile web add harness-ui-enhancer","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"dsh-ui-harmonizer","packageVersion":"0.7.0","bundle":{"patch":"./cordis.patch.yml"},"client":{"platform":"web"},"lifecycleScripts":{"prepare":"tsdown"},"peerDependencies":["@deepseek-ai/cordis","@deepseek-ai/dsh-client-runtime","@deepseek-ai/dsh-client-ui-slots"]},"identity":{"status":"found","installMode":"npm","upstreamNpm":"harness-ui-enhancer","manifestName":"dsh-ui-harmonizer","nameMatch":false,"npm":{"name":"harness-ui-enhancer","latestVersion":"0.6.1","publishedAt":"2026-08-20T14:26:00.621Z","createdAt":"2026-08-15T11:08:20.497Z","versionCount":6,"maintainers":1,"repository":"git+https://github.com/Physicolor/harness-ui-enhancer.git","hasInstallScripts":false,"deprecated":false},"repositoryMatch":"match","provenance":"none","tarballHost":null,"versionMatch":"differs"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"ui-enhancer","name":"dsh-ui-harmonizer","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":"web","parseErrors":[]},"capabilities":["agent-control","browser-ui","environment","filesystem","host-bundle"],"outboundHosts":[],"findings":[{"id":"HT-INSTALL-002","title":"Git 安装会触发 prepare 构建脚本","severity":"medium","confidence":"low","layer":"supply-chain","path":"package.json","pathClass":"manifest","line":33,"evidence":"\"prepare\": \"tsdown\"","remediation":"发布预构建制品（npm 或 GitHub Release tarball），并记录源码与发布包的一致性证明。","note":"该插件以 npm/tarball 预构建方式分发，prepare 不在用户机器上执行","hash":"810168c20b99e01213acbe59"},{"id":"HT-IDENTITY-002","title":"上游标注的 npm 包名与仓库 package.json 不一致","severity":"medium","confidence":"medium","path":"package.json","pathClass":"manifest","line":1,"evidence":"upstream npm=harness-ui-enhancer manifest name=dsh-ui-harmonizer","remediation":"核对安装命令实际安装的包是否由该仓库发布；monorepo 应指向具体子包。","layer":"identity","hash":"164b5143712853a684818818"}],"counts":{"critical":0,"high":0,"medium":1,"low":0},"rawCounts":{"critical":0,"high":0,"medium":2,"low":0},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-present","vulnerabilities":"complete","identity":"complete","artifact":"not-compared","llmReview":"not-needed","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":18,"bytesScanned":354613,"truncated":false,"lockfiles":["pnpm-lock.yaml","package-lock.json"],"pathClasses":{"markdown":3,"cordis":1,"source":10,"data":2,"manifest":1,"yaml":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"]},"timeline":[{"scannedAt":"2026-08-22T08:23:51.723Z","commit":"e07cbcb25d86e2524dbf103cb3d098b53ac31651","policyVersion":"HT-DSH-0.2.2","verdict":"caution","status":"static-complete"},{"scannedAt":"2026-08-21T11:24:20.933Z","commit":"50d9936fc650eb7ed7da9d5cd8e71caea6655ec6","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T10:53:09.808Z","commit":"50d9936fc650eb7ed7da9d5cd8e71caea6655ec6","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"verdict-change","from":"pass","to":"caution","commit":"e07cbcb25d86e2524dbf103cb3d098b53ac31651","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:23:51.723Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"50d9936fc650eb7ed7da9d5cd8e71caea6655ec6","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:24:20.933Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"50d9936fc650eb7ed7da9d5cd8e71caea6655ec6","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:53:09.808Z"}]}