dsh-dep-vuln-scan: DeepSeek Harness Native Dependency Vulnerability Scanning Plugin
2026-10-03
DeepSeek Harness plugin
DeepSeek
DSH plugin
Dependency vulnerability scanning
dsh-dep-vuln-scan
safety tools
DSH (DeepSeek Harness) natively depends on the vulnerability scanning tool `dsh-dep-vuln-scan`, a product of its “everything is a plugin” philosophy. This tool batches lockfile vulnerability queries via the OSV API, supports multiple ecosystems such as npm and PyPI, and provides CVE/GHSA identifiers, CVSS severity scores, and recommended fix versions. It offers two modes—`fast` (root-directory scanning) and `full` (recursive scanning)—and includes built-in retries, rate limiting, and persistence. As a read-only tool, it generates detailed reports and remediation commands, aiming to simplify the dependency security-checking workflow.
Read More