{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"zhu1090093659-dsh-web-ui-packages-dsh-web-ui-all","slug":"zhu1090093659-dsh-web-ui-packages-dsh-web-ui-all","rank":6,"url":"https://github.com/zhu1090093659/dsh-web-ui/tree/main/packages/dsh-web-ui-all","name":"zhu1090093659/dsh-web-ui#packages/dsh-web-ui-all","category":"ui","description":{"zh":"DSH Web UI 插件与皮肤合集：任务看板、git 图、右侧面板、远程移动端 UI、桌宠、实时 token 统计与皮肤中心。","en":"Plugin and skin collection for the DSH Web UI: task board, Git graph, right-side panel, remote mobile UI, pet, live token stats, and a skin center."},"stars":5443,"starsCheckedAt":"2026-08-21","repository":{"owner":"zhu1090093659","repo":"dsh-web-ui","requestedRef":"main","subpath":"packages/dsh-web-ui-all"},"npm":"@linxin666/dsh-web-ui-all","downloads":78278,"installMode":"npm","upstreamInstall":"dsh plugin --profile web add @linxin666/dsh-web-ui-all","tarball":null,"added":"2026-08-14","page":"https://awesome-dsh-plugin.com/p/zhu1090093659/dsh-web-ui--packages-dsh-web-ui-all/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"zhu1090093659-dsh-web-ui-packages-dsh-web-ui-all","slug":"zhu1090093659-dsh-web-ui-packages-dsh-web-ui-all","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:19:30.240Z","scanStatus":"static-complete","verdict":"pass","score":100,"commit":"b30bc3bbeba91d81f334caafef52800fba5f6aab","commitDate":"2026-08-22T09:51:52+08:00","artifactDigest":"sha256:16c1065cd62368bde8530095ac27834e50211045c34f8845930e6d9a7a6776bc","downloadUrl":"https://github.com/zhu1090093659/dsh-web-ui/archive/b30bc3bbeba91d81f334caafef52800fba5f6aab.tar.gz","installMode":"npm","installCommand":"dsh plugin --profile web add @linxin666/dsh-web-ui-all","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"@linxin666/dsh-web-ui-all","packageVersion":"0.2.8","bundle":{"patch":"./cordis.patch.yml"},"client":{"inject":[],"platform":"web"},"lifecycleScripts":{"prepare":"tsdown"},"peerDependencies":[]},"identity":{"status":"found","installMode":"npm","upstreamNpm":"@linxin666/dsh-web-ui-all","manifestName":"@linxin666/dsh-web-ui-all","nameMatch":true,"npm":{"name":"@linxin666/dsh-web-ui-all","latestVersion":"0.2.7","publishedAt":"2026-08-21T09:34:23.900Z","createdAt":"2026-08-13T15:06:36.507Z","versionCount":28,"maintainers":1,"repository":"https://github.com/zhu1090093659/dsh-web-ui.git","hasInstallScripts":false,"deprecated":false},"repositoryMatch":"match","provenance":"none","tarballHost":null,"versionMatch":"differs"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"web-ui-compat","name":"@linxin666/dsh-web-ui-all","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-settings","name":"@linxin666/dsh-client-ui-web-ui-settings","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-plugin-manager","name":"@linxin666/dsh-client-ui-plugin-manager","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-community-plugins","name":"@linxin666/dsh-client-ui-community-plugins","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-dsh-aionui-panel","name":"@linxin666/dsh-client-ui-aionui-panel","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-task-board","name":"@linxin666/dsh-client-ui-task-board","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-git-graph","name":"@linxin666/dsh-client-ui-git-graph","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-remote-web-ui","name":"@linxin666/dsh-remote-web-ui","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-pet","name":"@linxin666/dsh-pet","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-ssh","name":"@linxin666/dsh-ssh","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-describe-image","name":"@linxin666/dsh-tool-describe-image","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-chat-recovery","name":"@linxin666/dsh-chat-recovery","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-liangshen","name":"@linxin666/dsh-liangshen","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-skill-explorer","name":"@linxin666/dsh-client-ui-skill-explorer","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-desktop-launcher","name":"@linxin666/dsh-desktop-launcher","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-doctor","name":"@linxin666/dsh-doctor","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-skin-center","name":"@linxin666/dsh-client-ui-skin-center","path":"cordis.patch.yml","disabled":false},{"id":"web-ui-better-sidebar","name":"dsh-better-sidebar","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":"web","parseErrors":[]},"capabilities":["browser-ui","host-bundle"],"outboundHosts":[],"findings":[{"id":"HT-INSTALL-002","title":"Git 安装会触发 prepare 构建脚本","severity":"medium","confidence":"low","layer":"supply-chain","path":"package.json","pathClass":"manifest","line":26,"evidence":"\"prepare\": \"tsdown\"","remediation":"发布预构建制品（npm 或 GitHub Release tarball），并记录源码与发布包的一致性证明。","note":"该插件以 npm/tarball 预构建方式分发，prepare 不在用户机器上执行","hash":"810168c20b99e01213acbe59"}],"counts":{"critical":0,"high":0,"medium":0,"low":0},"rawCounts":{"critical":0,"high":0,"medium":1,"low":0},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-missing","vulnerabilities":"lockfile-missing","identity":"complete","artifact":"not-compared","llmReview":"not-needed","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":12,"bytesScanned":24594,"truncated":false,"lockfiles":[],"pathClasses":{"markdown":3,"test-example-docs":1,"yaml":1,"cordis":1,"source":5,"manifest":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"]},"timeline":[{"scannedAt":"2026-08-22T08:19:30.240Z","commit":"b30bc3bbeba91d81f334caafef52800fba5f6aab","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:17:16.301Z","commit":"314f9ea7524c1a8fa2bb6c9a2c3bcaaa440cee5f","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T10:44:50.350Z","commit":"314f9ea7524c1a8fa2bb6c9a2c3bcaaa440cee5f","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"b30bc3bbeba91d81f334caafef52800fba5f6aab","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:19:30.240Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"314f9ea7524c1a8fa2bb6c9a2c3bcaaa440cee5f","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:17:16.301Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"314f9ea7524c1a8fa2bb6c9a2c3bcaaa440cee5f","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:44:50.350Z"}]}